Internal Audit - Information Technology - Security

NO SPONSORSHIP

Internal Audit Information Technology & Security

The preference is somebody out of a public accounting firm or a big four firm

You will be doing IT audit across the enterprise, meaning applications infrastructure and security

Financial services is highly preferred

Because this is highly regulated they will be doing compliance assessments also

LOCATION: CHICAGO, IL

3 days onsite

You will need a BS Degree, minimum 2 years of audit related work in conducting risk-based information technology and security audits. Cyber security reviews and internal audit standards AICPA, IAA IPPF COBIT NIST CSF CyberArk Splunk SailPoint ServiceNow JIRA AWS RDB Oracle DB2 SQL GRC Etc.

Qualifications

Experience

• [Preferred] Experience working in a complex, fast paced environment.
• [Preferred] Consulting and/or accounting firm experience.
• [Preferred] Experience in Financial Services/Security Industry and working with regulations such as Regulation Systems Compliance and Integrity (Reg SCI).
• [Preferred] Experience using the principles, practices, and techniques involved in conducting audits in accordance with the requirements set forth in the International Standards for the Professional Practice of Internal Auditing published by the Institute of Internal Auditors (IIA).

[Preferred] Familiarity with security tools such as: CyberArk, Splunk, SailPoint

[Preferred] Familiarity with change management tools such as: ServiceNow, Jira, Confluence, GitHub

[Preferred] Familiarity with databases such as: Oracle, DB2, SQL

[Preferred] Familiarity with cloud based solutions: AWS, Workday

[Preferred] Proficiency using Archer or other audit or Governance Risk and Compliance (GRC) software

Education and/or Experience:

Bachelor s degree (or equivalent) in Information Technology, Computer Science, Computer Engineering, Accounting, Finance, Business Administration, or related field.

2 years of experience (audit-related) in conducting risk-based Information Technology and Security audits and projects, cyber security reviews, and internal audits.