What you'll do...

Position: Senior Manager, Information Technology Audit

Job Location: 811 Excellence Dr, Bentonville, AR 72716

Duties: Responsible for a portfolio of computer information systems focused technology audits; engages with cross-cutting stakeholders, both within Internal Audit and Global Technology leadership; focuses on continuous learning of technical topics, including data analytics, continuous auditing, and generative AI; trains internal and external stakeholders on cutting-edge technology and the application and use for technical audit testing; represents the technology audit department to both internal and external company stakeholders; assists with the audit planning and technology risk assessment process. Drives the development and implementation of computer information systems enhancements by analyzing the technology environment and communicating technical gaps, risks, and remediation priorities; evaluates operational features and operations management systems and processes to accommodate omnichannel retail growth; designs technical testing plans to determine operating effectiveness of computer information systems; aligns short- and long-term solutions with business partners to ensure efficiencies across the organization; reviews technology roadmaps and ensures alignment with departmental and company strategies; mentors and trains team members on applicable topics and processes; seeks continuous learning and development in key technical fields (for example, networking, cybersecurity, software development, cloud and generative AI); assists team members in the resolution of complex technical issues. Manages the strategy for computer information systems risks by prioritizing enhancements to existing systems with high-risk issues; presents observations and recommendations to system enhancements that meet compliance obligations, potential risk mitigation, and long-term business strategies; reviews system enhancement needs and provides unique risk-based solutions; prioritizes customer and Audit Committee requests; ensures the efficient use of audit testing and time management; executes computer information systems audit projects; ensures alignment of customer business strategy with system enhancements. Identifies technology risks in audit engagements; evaluates risks and compensating controls for system issues and obtains and reviews computer information systems risk remediation plans. Leads the governance of the computer information systems project portfolio by leading technical audits that analyze and evaluate computer information systems risk within the organization; ensures the integrity of the systems portfolio; represents the audit division in the corporate project management office; evaluates and determines if projects presented are regulatory in nature; presents technical audit findings to Global Technology stakeholders, Internal Audit leadership, and the Audit Committee. Manages standardized and ad hoc computer information systems audit engagements by securing internal customer needs and multi-department agreement and cooperation; designs project scopes, elements, and timelines; researches and analyzes costs; develops technical testing plans; assigns projects to team members for completion; reviews staff documentation for quality, completeness, and accuracy; coordinates with suppliers and internal resources for plan execution; adapts quickly to changing requirements; communicates plans and status updates to senior management. Evaluates new computer information systems and innovative technology by driving audit testing that focuses on the design and operating effectiveness of technology architecture, systems, and applications; drives team members to a solution-based focus that remediates risks; performs technical testing execution in alignment with audit professional practices and standards; researches and engages outside vendors to explore and provide advanced solutions in technology risks; reviews remediation action plans from technology stakeholders for risk remediation; stays involved in key technology and retail organizations.

Minimum education and experience required: Bachelor's degree or the equivalent in Business, Engineering, Information Technology, or related field plus 10 years of post-bachelor's progressively responsible experience in information technology, audit, or information security or related experience; OR Master's degree or the equivalent in Business, Engineering, Information Technology, or related field plus 8 years of experience in information technology, audit, or information security or related experience.

Skills Required: Must have experience with: Performing data analytics using visualization tools such as Power BI, Tableau and QlikView; Using querying languages (SQL and Galvanize (formerly ACL)) for auditing, internal controls, data analytics and risk management, to extract, transform, and analyze data, and identify control gaps, investigate fraud and monitor compliance; Performing assessments for compliance with Payment Card Industry (PCI) standards; Managing Data Loss Prevention tools such as Cloud Security Broker (CASB) and DLP Symantec; Conducting data privacy assessments in accordance with the General Data Protection Regulation (GDPR - Europe) and the Mexican Privacy Act; Extraction, Transformation and Loading of data stored in ERPs (SAP R/3 and Oracle) for Materials Management, Financials and Controlling, Sales and Distribution processes; Conducting fraud and compliance investigations in accordance with ACFE principles and standards; Using tools like Big ID, Varonis and One Trust, for data discovery, data classification, privacy, and data risk management, for both structured and unstructured data; data security, insider threat detection and access governance; and last, third-party risk and compliance; Securing, monitoring and managing privileged access accounts, including managing user identities, authentication policies and Single Sign On (SSO) with CyberArk, Oracle Identity Access Management, SAP Access Control, and Microsoft Active Directory; Conducting cybersecurity, risk-based, and IT governance audits in alignment with international frameworks and standards established by ISACA (e.g., CISA, CISM, CRISC, or CGEIT); Assessing projects to determine their regulatory compliance requirements, including Sarbanes-Oxley (SOX). Employer will accept any amount of experience with the required skills.

Rate of pay: $107,390.00 - 180,000.00/year