IT Audit Manager

The IT Audit Lead (Manager) assists the organization by protecting its internal controls and data within its technology system. He/she will safeguard information by identifying weaknesses and create strategies to prevent security breaches, examine the organizations IT system to ensure sufficient controls are kept, security of data stored or transported, and classify technology issues and provide additional recommendations to management with solutions to fix internal controls. The IT Audit Lead is responsible for the formulation of appropriate audit programs, complete the audit plans as scheduled, generating draft audit reports, and conducting thorough follow-up audits on previously identified issues. He/ She will also be involved in drafting of the annual risk-based audit plan, and managing audit engagements for assigned business units.

I. JOB DUTIES AND RESPONSIBILITIES

1. Schedules and plans audits; initiates project planning, assess risk and develops audit direction (engagement level).
2. Performs audit work, including plan preparation, work papers, finding, and associated reports.
3. Suggests leading practices on IT risk management matters, particularly on application and information security, network, data privacy, BCP, and other related IT parameters.
4. Provides Business and IT management with guidance on IT risk management matters, particularly on application and infrastructure security.
5. Evaluates control environment in reflection of emerging trends in the information technology space, including cloud computing, BYOD, and social media
6. Conducts IT audits and reviews of systems, applications and IT processes. Prepare and draft reports
7. Recommends revisions and/or additions to policies and procedures in order to improve governance systems, risk management, as well as internal control environment.
8. Develops and maintain the Internal Audit Procedures to ensure that best practice is taken account of and that the audits address specific areas of risk management.
9. Maintains a comprehensive system for recording all audit plans, work papers, findings, reports, and follow-up audits. 11. Agrees action plan necessary to implement the audit recommendations; monitor the implementation of any recommendations
10. Performs investigative audits, if warranted, to facilitate the appropriate evaluative proceedings for the determination of the culpability of officers or employees who are charged with acts of fraud or dishonesty, or with gross negligence constituting a violation of the company's code of conduct.
11. Develops and provides technical training to EPPI departments as deemed appropriate.

II. JOB QUALIFICATIONS

• Certified Public Accountant (CPA) Board Passer
• Certified Information Systems Auditor (CISA), ITIL, CISSP, CISM or other related professional certification
• At least 5 years of meaningful and progressive external or internal audit experience, with 2 years in senior role
• Adept in internal audit methodology and internal audit process, ISO 27001, Control Objectives for Information and related Technology (COBIT)
• Advanced knowledge in MS Office (i.e., Word, Excel, Power point, Visio)
• Expert in firewalls, VPN, Data loss prevention, IDS/IPS, Web-Proxy and Security Audits, Data Privacy Act, related laws and regulations
• Experience with multiple technology domains and/or database administration, software development and network
• Knowledgeable in SAP ERP system
• Experience in big 4 audit firms
• Preferably with real estate industry background