Summary

This position is responsible to supervise the audit's related to AAMs information technology capabilities, security, and operating protocols, thereby conducting audits and investigations to ensure IT systems compliance with all federal and state regulations, as well as internal regulations related to privacy and security. Additionally, also detecting fraud or other inefficiencies in AAMs IT systems

Responsibilities

• Perform IT security audits to include system development standards, network, operating system, data center, Information system security (including evaluation of security vulnerabilities and mitigation procedures), programming controls and cybersecurity audits.


• Perform general and application control reviews for information systems and other reviews associated with IT policies, change management, business continuity planning, backup and disaster recovery, and system maintenance.


• Assist and train other audit staff in the use of computerized audit techniques, and in developing methods for review and analysis of computerized information systems.


• Develop and update Continuous Auditing (CA) implementation strategy and participate in the same through understanding the business processes, application systems, and data sources, Identifying critical process risks and system control points, designing technology-assisted approach to test controls etc.


• Manage the results of continuous auditing (tracking, reporting, monitoring, and following-up) in a master file. Capitalize on understanding of the generated results by standardizing and consolidating CA test scripts for IA team reference and knowledge sharing.


• Maintain knowledge with respect to relevant state-of-the-art technology, equipment, and/or systems.


• Maintain and update SAP T-codes library to be aligned with IA departmental scope of work.


• Assist the line manager in preparing the IA department budget and resource plans and periodically monitor actual cost vs. budgeted figures.


• Plan the audit engagements, ensure timely communication with auditees, define the scope, objectives and timelines in consultation with the direct line manager.


• Develop risk based audit programs that reflects key risks and clear understanding of IT, business operations, departmental/ process goals and objectives.


• Perform audits and IT audits as per Institute of Internal Auditors (IIA) standards and IAD guidelines, supervise and review the work of staff assigned to the audit engagement, and ensure the completion of deliverables within time in cost efficient manner.


• Conduct special audits (ad-hoc reviews) and other tasks as assigned by the IA management team.


• Prepare and maintain internal audit documentation process, IA Memos, administrative records and other internal communications as per Records Management and IIA documentation process standards.


• Identify, analyze and evaluate potential issues, then facilitate the resolution of such issues by developing recommendations to enhance internal control processes and information systems.

Skills

Requirements

• Min. 8+ years of experience


• Must have worked previously as an IT Auditor


• Certification in CISA is a must have along with CIA


• Strong experience working with SAP