Job Purpose Summary

The IT Auditor II, Corporate Audit Services (CAS), reports functionally to the IT Audit Manager/Sr. Manager and is responsible for conducting IT audit engagements and providing sound project management. Will assess governance, risk management, and internal controls to identify improvements and facilitate development of appropriate management remediation plans. Common tasks include project planning and execution, independently creating audit files and workpapers, and draft reports, and reporting to audit leadership.

Key Responsibilities and Accountabilities

General

• Demonstrate sound presentation, written, and interpersonal communication skills.

• Communicate with audit staff, audit leadership, and IT management clearly and concisely.

• Independently document audit planning files, supporting evidence, workpapers, and draft audit reports/memos.

• Provide day-to-day guidance to audit staff to create quality audit documentation.

• Independently organize and prepare for internal auditee/client meetings during all phases of an engagement.

Planning

· Assist audit management in the execution of risk assessments and development of the audit plan.

· Provide input to scheduling for audit engagements within assigned scope of responsibility.

· Assist with engagement-level risk assessments to identify key objectives, associated risks, and mitigating controls based on audit scope.

· Apply sound judgment in scoping and planning IT audits and advisory reviews.

· Identify and assess IT risks and provide advice to audit management regarding understanding and treatment of these risks.

· Assist audit management in establishing and implementing policies for the internal audit.

· Adhere to the requirements of the IPPF when planning and conducting engagements.

Execution

• Implement and adjust project plans to ensure engagement delivery in accordance with project budgets and timelines.

• Supervise resource workload and task prioritization on audit and advisory engagements.

• Execute 2-3 IT audits simultaneously, including reviews of cyber security, existing production applications, systems currently being developed, technology infrastructure, and specialized or emerging technologies.

• Assess the controls over application processes, physical and logical security; systems acquisition and development; system and network infrastructure; system architecture; change management; computer operations; and production support.

• Apply internal audit methodology to meet specific audit engagement objectives.

• Ensure audit reports clearly communicate identified risks, issues, recommendations, and management corrective actions.

• Prepare draft informative presentations on IT and/or process risk to share with senior leadership.

• Develop data analyses and provide management with proper context of potential risk exposure due to control weaknesses.

• Implement, and monitor project plans to ensure engagement delivery in accordance with project budgets and timelines.

• Track and communicate progress towards established engagement goals and milestones to project leaders.

• Document audit deliverables in compliance with Internal Audit standards.

• Facilitate and monitor corrective action taken by management to remediate Findings and Opportunities identified during audit engagements.

Relevant Areas of Knowledge

The list of relevant knowledge areas that follows is a broad, representative list of knowledge and technical skill areas relevant to this position. It is generally expected that this position would possess or demonstrate basic knowledge in some of the areas listed below.

· IIA International Professional Practices Framework and Code of Ethics

· Relevant risk and control frameworks (e.g., COSO Internal Control, COSO ERM, COBIT, ISO 31000 Risk Management, ISO 27000 Information Security)

· IT governance

· IT infrastructure and operations

· Payment technology and transmission methods (e.g., Real Time Payments, ACH)

· Reporting on Controls at a Service Organization – SOC1/SOC2

· Data analysis and continuous monitoring (e.g., PowerBI, Tableau)

· Fraud risk and fraud risk management

· Business continuity management

· Proficiency in standard business computer applications (e.g., Microsoft Office, project management)

· Overall awareness and working knowledge of Artificial Intelligence (AI) technologies and applications (e.g., Robotic Process Automation, Machine Learning, Natural Language Programming, GenAI, ChatGPT)

Specialty Skills/Knowledge

• Auditing across large scale investment organization, performing risk and data analysis, delivering high quality audit reports, and communicating to senior leaders on results and corrective action.

• Audit risk and control experience in general and application control environments, including information security, identity and access management, incident analysis, database security, operating system analysis, logging and monitoring and change management.

• Analytical, technical, and auditing skills with exposure to IT and compliance audits.

· Data analysis and visualization technology (Tableau, PowerBI)

• Ability to work on multiple tasks and manage priorities and workload as part of an agile team.

Qualifications

• BA/BS in Technology, Information Systems, Cybersecurity, or related field of study.

· 3-4 years of experience in performing and leading complex information technology audits.

• Intermediate English Speaker
• Ability to travel up to 30%

Preferred (Optional)

· Professional audit or information security certifications preferred (CIA, CPA, CISA, CISSP, SANS GIAC, etc.).

· Experience in a “Big 4” accounting / consulting firm environment.

· Post-secondary degree (e.g., MBA).

· Experience in a recognized process improvement discipline (e.g., Six Sigma, Lean, CMMI).

Conduent is an Equal Opportunity Employer and considers applicants for all positions without regard to race, color, creed, religion, ancestry, national origin, age, gender identity, gender expression, sex/gender, marital status, sexual orientation, physical or mental disability, medical condition, use of a guide dog or service animal, military/veteran status, citizenship status, basis of genetic information, or any other group protected by law.