Lead Information Systems Auditor (Glenmont, NY)

Job Posting

This position reviews, evaluates, and makes recommendations for the correction or improvement of information systems; computer networks; information security; internal, operational and management control systems; and organizational unit performance at American National and its affiliates. On specific engagements, this position may take a leading role. The nature of this position requires contact with company employees, middle management, and outside third-party business representatives.

This position is available in League City, TX, Glenmont, NY and Springfield, MO.

What You'll Do: 

• Leads the development of audit plans for individual engagements by identifying the business process and IT risks and determining the risk severity and business impact.
• Responsible for the full audit cycle, including planning, risk assessment, identifying controls, creating audit procedures, testing processes and controls, preparing workpapers, and developing conclusions about IT and business processes.
• Communicates with the auditee and the Audit Management team to confirm audit findings by producing audit documents and workpapers; documenting findings and recommendations for management review and presentations. In charge of coordinating audit closing conferences and assisting with resolution of issues.
• Participates in the development, planning and implementation of fraud investigations involving highly confidential information.
• Reviews and approves the work of other IT Audit team members by ensuring audits are performed objectively, conclusions are correct, and results are reported accurately.
• Takes the lead in the company’s annual process for maintaining compliance with Sarbanes-Oxley Section 404 (SOX).
• Leads the completion of audit and control testing projects of information systems, computing network, telecommunications, operating and application software, cybersecurity, information security audits of Corporate Technology Services and business units, external agencies, and vendors. This includes understanding key processes and internal controls, conducting a risk assessment based on corporate goals and strategy, developing a risk-based audit program based on risk assessment, which includes all audit procedures, developing schedules and key milestones, coordinating audit resources, formulating observations and conclusions of management’s internal control based on audit procedures, and conforming with professional standards.
• Contributes to the annual or periodic risk assessment for information systems matters and contributes to the development of the annual audit plan for information systems matters as well as periodic updates.
• Demonstrates advanced and broad knowledge and expertise in the audit field, information technology auditing, including the areas of logical security, network security, change management, problem management, physical security, disaster recovery and business continuity planning, data privacy, and application controls.
• Prepares the initial draft of audit reports or SOX control testing reports that includes an overall rating or the assessment of the effectiveness of internal controls and that will be presented to the Management Audit Committee and the Audit Committee of the board of directors.

Required Qualifications: 

• Bachelor’s degree from an accredited college or university, a minimum quantity of acceptable accounting and information systems hours.
• Six to 10 years of relevant auditing, controls testing, or information systems experience, a portion of which was obtained in a public accounting firm, insurance company, or equivalent experience.
• Certified Information Systems Auditor (CISA) designation or a CPA with a Certified Information Technology Professional (CITP) certification.