Description
& Requirements
Responsibilities
The overall objective of this position is to help improve business performance by identifying, managing and minimizing risks associated with the various information systems and security. Specifically, this position will:
1. Be assigned complex and sometimes ambiguous audit projects and will actively be involved in making decisions regarding the scope of work performed, the breadth of audit testing needed, and reporting disposition of results.
2. Apply information systems development, implementation and operation control concepts in a variety of technology settings, and assess the exposures from ineffective or missing control practices.
3. Conduct integrated audits with the operational/process internal auditors to create value-add internal control and business process improvement suggestions and recommendations, with emphasis on profit maximization. Support process audits regarding obtaining the necessary data in the company's systems.
4. Conduct business control reviews, system application audits, computer security audits, Intellectual Property audits, cyber security audits, data protection and privacy, and general data center reviews.
5. Support the SOX Program for IT controls in tandem with SOX Management for business process controls. Facilitate efforts with the IT Department in SOX programs, including providing consultation on remediation actions.
6. Provide consulting services related to information systems standards, policies and procedures.Emphasis in understanding normal controls with third party arrangements and e-commerce preferred.
7. Develop work programs, conduct interviews, gather facts and evidence, and prepare and organize audit work papers.
8. Write clear and concise reports to management.
9. Perform special projects as assigned.
Position Requirements:
The person selected for this highly visible position must be able to work in a fast paced, changing, global, high technology company environment and be able to persuasively present internal audit views and positions. The successful candidate will have:
10. Extensive information systems audit experience, project management skills, and supervisory skills necessary to produce audit work which conforms to professional standards.
11. Knowledge of NIST, CIS Controls, ISO27000 and COBIT frameworks
12. Exposure to RPA, machine learning languages, AI, etc.
13. Experience in performing test of controls, integrated workflow analysis, process mapping and flowcharting.
14. Ability to travel approximately 10 percent including some international,
15. Ability to manage a variety of projects simultaneously to successful completion with minimal management supervision.
16. Strong knowledge of SAP systems and modules, specially SAP Security and GRC.
17. Ability to utilize computer assisted audit techniques (CAATs), technical knowledge in data extraction and processing tools (Alteryx, ACL, Python, etc.) and data visualization (PowerBI, Tableau, Qlink) is a plus.
18. Desirable knowledge of Continuous Auditing.
19. Excellent oral and written communication and personal computer skills. Must be able to work with all levels of the company and organization.
20. Be generally knowledgeable of accounting and business processes.
21. Ability to learn and understand the various types of technology employed by Infinera and its competitors.
Experience Requirements:
The person selected must have a high level of maturity and experience to win the respect and confidence of fellow employees and managers. The successful candidate will possess:
22. from 5 -10 years of broad-based technology audit, software development, systems integration, and consulting experience preferably in an international manufacturing environment.
23. Technical expertise and knowledge base of operating systems, networking and security systems.
Education / Professional Certification Requirements:
Must possess a relevant college degree and preferably a CISA. Additional certifications (e.g. CPA, CIA, MBA) a plus.