Brief Description: Project Manager will primarily be responsible for performing complex, value-added professional internal auditing work. The work involves designing and completing data analytics focused on the most substantial and relevant risk to the Company. The Project Manager is responsible for building, developing, and executing data analytics and assisting with developing analytics skills for Internal Audit team members. In addition, the work will require supporting the planning and execution of the organization's Internal Audit Plan. The Project Manager will report to the Director of Internal Audit. Detailed Description:
- Plan, organize, lead, and execute IT audit engagements of internal controls in critical areas, such as SDLC, change management, application controls, technology infrastructure, ICFR controls, Security, IT infrastructure, third parties, IT project management, cybersecurity, data protection, privacy, and IT processes throughout the company. Assists and leads as required in the planning, organizing, and executing financial, operational, and compliance audits.
- Develop, organize, and execute data analysis procedures using computer-assisted auditing techniques (CAATs), including continuous audit activities, writing SQL inquiries from scratch to support IA activities, and experience with analytic tools such as IDEA, ACL, and Excel. Finally, CAATs and tools are used to draw logical conclusions and prepare written reports and executive summaries. Also, execute ad hoc analyses, code reviews, and data extractions requested by IA team members.
- Performs and leads the execution of IT audit procedures, including identifying and defining issues, developing criteria, reviewing, and analyzing evidence, and documenting client processes and procedures. It may include navigating a variety of servers, data types, and data structures and manipulating large data sets to complete statistical and other analyses. Finally, developing custom analytics for operations, finance, and technology audit activities.
- Exhibits the ability to perform walkthroughs and tests of design and effectiveness over ITGC within an organization and assist in identifying and testing the controls designed to ensure and meet management's objectives.
- Assist business partners and IA management with applying key frameworks, including COSO/COBIT and Cybersecurity framework assessment for internal controls, and develop a risk-based audit approach focusing on significant business risk exposures and improvement opportunities.
- Assist the IA Director with developing presentation materials for periodic reporting to the Audit Committee, the audit risk assessment, and the development of the annual IA plan.
- Conduct interviews, review documents, develop and administer questionnaires, compose summary memos, and prepare detailed working papers to execute IT and other audit activities.
- Identifies, develops, and documents IT audit issues and recommendations to enhance internal controls, maximize efficiency, and minimize exposure to loss and regulatory risk using independent judgment.
- Draft audit comments and report issues to support findings identified during fieldwork. Obtains management agreement, in writing, on control issues and commitment to implement recommendations.
- Perform testing, updating, training, and creating specific audit procedures and guidance for ITGC, application controls, and key reports, including those that support requirements regarding Sarbanes-Oxley (404) compliance for all audit-related issues.
- Develops and maintains productive client and staff relationships through individual contacts and group meetings.
- As requested, may represent IA on organizational project teams at management meetings and external organizations. Stay abreast of current business and industry trends relevant to the company. Demonstrate in-depth technical capabilities and professional knowledge. Demonstrate the ability to assimilate new knowledge.
Job Requirements:
- Knowledge of the COSO, COBIT5, or NIST frameworks.
- Develop and execute data analysis procedures using computer-assisted auditing techniques (CAATs), including continuous audit activities, writing SQL inquiries from scratch to support IA activities, and experience with analytic tools such as IDEA, ACL, and Excel. Finally, CAATs and tools are used to draw logical conclusions and prepare written reports and executive summaries.
- Execute ad hoc analyses, code reviews, and data extractions requested by IA team members.
- Advanced knowledge of the Professional Practice of Internal Auditing standards and the Code of Ethics developed by the Institute of Internal Auditors.
- Possess knowledge of and skill in applying internal auditing and Generally Accepted Accounting Principles (GAAP) and practices.
- Awareness of requirements related to internal controls over financial reporting as set forth by the Sarbanes-Oxley Act 2002.
- Provide technical support in assessing, designing, and implementing ITGC requirements.
- Apply current knowledge of IT trends and processes and test client-related business processes to evaluate and identify security and risk management issues and other opportunities for overall process improvement.
- Execute assigned client engagements from start to completion, including the overall planning, execution, and completion of engagements. The engagement includes all phases of the audit process, including planning, identifying risks, establishing objectives and scope of work, creating the audit program, performing the audit fieldwork, documenting work performed, and meeting audit project milestones.
- Possess considerable skill in planning, project management, and maintaining composure under pressure while meeting multiple deadlines.
- Possess effective verbal and written communication, including active listening skills, presenting findings and recommendations, negotiating issues, and audit observations with client personnel.
- Possess advanced skills in conducting quality control reviews of audit work products.
- Possess knowledge of or at least a familiarity with fraud, forensics, and other detection techniques and concepts.
- Be available to travel 25%-35% domestically, including limited international travel where visas may be required.
Minimum Requirements:
- Bachelor's Degree in Statistics, Data Science, Information Technology Assurance, Management Information Systems, Computer Science, Accounting, or related discipline required.
- 3+ years of progressive relevant work experience in auditing, accounting, or business analysis.
Preferred Requirements:
- 1+ year of supervisory or project management experience.
- Master's degree in business, Math, Analytics, or related field is preferred.
- Certified Public Accountant (CPA), Certified Internal Auditor (CIA), Certified Fraud Examiner (CFA), and Certified Information Systems Auditor (CISA) certifications are highly preferred or working towards obtaining.
- Oil & Gas Industry, auditing, and accounting functions experience.
- Accounting firm or public company experience is a plus.
Additional Details: This position requires the person to work in office locations and outdoors in all weather conditions, including precipitation, cold/heat, high wind, and turbulent conditions. In addition, the Corporate Internal Auditor will be exposed to the typical conditions of the local area where facility operations exist. This job may require overtime, including weekends or holidays, and may include domestic and international travel to various Company locations worldwide.
|