Okta10 дней назад
Senior IT Internal Auditor
Зарплата не указана
San Francisco
Обязанности
- 01Lead technology, cybersecurity, and AI-related risk assessments to identify key enterprise risks and define audit scope
- 02Design comprehensive, risk-based audit programs and testing procedures tailored to the technology environment
- 03Lead process walkthroughs and execute fieldwork in alignment with Internal Audit methodology
- 04Evaluate the design and operational effectiveness of key technology, cybersecurity, and AI-related controls
- 05Prepare high-quality, detailed workpapers documenting scope, testing results, evidence, and conclusions
- 06Leverage data analytics, AI tools, and emerging technologies to enhance audit efficiency and evaluate AI/ML controls
- 07Pinpoint systemic root causes of control weaknesses and associate them with specific business processes
- 08Draft clear, concise audit reports presenting findings with business impact framing for stakeholders
- 09Partner with TDI, Security, Engineering, and cross-functional teams to track remediation activities
- 10Provide risk-based advisory support to management during business process improvements and new system implementations
- 11Mentor and provide structured guidance to Associate and Staff Auditors on audit methodology and standards
Требования
- 01Bachelor's degree in Computer Science, Information Systems, STEM, Accounting, or a related field
- 023-6 years of audit experience with a focus on technology, cybersecurity, or related field
- 032+ years of audit experience in diverse technology environments (e.g. operating systems, networks, public/private cloud, third-party cloud-based applications and platforms)
- 042+ years of audit experience with technology operational processes (e.g. software development lifecycle, system integration and monitoring, data protection, identity and access management)
- 05Experience assessing emerging AI risks (e.g. generative AI, ML models, automated decisioning, AI-enabled third-party services)
- 06Demonstrated ability to execute complex audit engagements independently, with minimal supervisory oversight
- 07Proven ability to identify and articulate systemic root causes of control deficiencies, linking causes to the business processes that generated them
- 08Strong understanding of IT general controls (ITGCs) and IT application controls (ITACs), including cybersecurity, Software Development Life Cycle (SDLC), access and change management, logging and monitoring, disaster recovery, and cloud computing
- 09Technical expertise in IT systems including infrastructure, cybersecurity, and familiarity with IT governance frameworks (e.g. NIST CSF, COBIT, ISO 27001)
- 10Strong analytical and critical thinking skills