What are the responsibilities and job description for the Information Security Auditor position at Advance Digital Systems?
Job Details
We are seeking an experienced Information Security Auditor to provide compliance and information security support to in preparation for annual Financial Statement Audits, internal SOX control reviews and FISMA reviews, provide support in updating policies and procedures, and assist with ongoing compliance self-assessments.
Position Responsibilities:
- Participates in the process to evaluate, develop, maintain, and update the technology compliance program. Advises the technology support officer and technology managers on compliance, information security, and internal controls.
- Prepares the technology departments for the yearly financial statement audit and SOX internal control reviews.
- Assist in developing required documents in support of internal SOX or FISMA reviews.
- Develop solutions with team members to minimize vulnerabilities.
- Advises the technology officer of SOX and compliance issues and recommends solutions
- Provides a weekly status report documenting concerns, issues, risks, and progress.
- Recommends and helps implement GRC Tools to increase automation in the areas of compliance, auditing, and vulnerability detection for the branch.
- Perform weekly Splunk/audit log reviews and report any anomalies
- Evaluate system documentation to meet compliance requirements
- Assists with building governance and risk management tasks and activities for the team and management review
- Designs, tests and reviews controls for compliance and ensures proper documentation is recorded.
- Creates audit and monitoring reports used by the team, as directed.
- Thoroughly assess and validate the SOX Risk Control Matrices (RCM s) for identified systems of record against Board policies. Document findings and recommendations.
- Crosswalk the SOX RCMs against the Information Security Program standards and procedures and document the results.
- Provide recommendations, develop action plans, and help implement capabilities to improve compliance and security practices.
- Document updates to compliance related policies, processes, procedures, and/or standards as directed by the compliance team.
Position Requirements:
- Shall have at least five (5) years of progressively responsible experience in the information technology arena as an IT Auditor, Information Security Analyst.
- Experience with evaluating Cloud internal controls reports, SOC-1 and SOC-2.
- Experience with assessing IT Systems leveraging SOX, FISCAM, COBIT or FISMA Compliance strongly desired.
- Knowledge and experience in Cloud applications such as Workday or Coupa desirable, not required.
- Simultaneously works on several complex assignments requiring analysis of control applicability and evaluation of control gaps for financial systems.
- Experience with supporting financial IT audits and successfully developing audit and security related system documentation to reduce risk and meet control requirements desired.
- Experience in developing a Risk Control Matrix, Test of Design and Test of Effectiveness (TOD/TOE).
- Experience with performing system audit log reviews via Splunk tool
- Experience assessing and evaluating NIST 800-53 controls
- Experience with leading and successfully implementing high visibility projects desired.
- Possess clear, concise, and effective verbal and written communication and project management skills needed for functioning in an unstructured matrix management environment.
- CISSP or CISA certification strongly desired.
___________________________________________
No Phone Calls Please
Please send us your resume in a word file with contact details
Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.
