Information Security Auditor, Senior

Remote Work: Hybrid

The Senior Information Security Auditor leads in the execution of Information Technology (IT) audits, including those audits facilitated over the IT organization and the IT aspects of the company’s financial, operational, and compliance audit projects. Reporting to the Director, Information Security, the Senior Information Technology Auditor may provide guidance to other parts of the organization.

• Responsible for planning, leading, and executing IT audit projects and the IT portion of integrated audits (other financial, operational, and compliance projects with an IT sub-focus):
  • Performs upfront Internal Audit project planning, including the definition of audit scope and audit work programs
  • Leads interviews to understand the business process and application flow and documents the business process in a set of flowcharts or narratives
  • Evaluates the effectiveness of the design of controls for business processes and executes testing of internal controls, identifying exceptions
  • Incorporates the use of data analytics where appropriate to improve the audit efficiency and broaden the audited population
  • Summarizes the audit results in a set of audit workpapers and an audit report and presents results to management
• Ensures that Zebra IA methodology is adhered and that workpapers are compliant with the Institute of Internal Auditors Professional Standards for Internal Auditing
• Leads or assists in the execution of SOX compliance pre-auditing of the IT General Controls (ITGCs), including the evaluation of the design of these SOX controls, the completion of ITGC SOX walkthroughs, and testing the effectiveness of ITGC SOX controls.
• Assists with efforts to evaluate system access and segregation of duties and evaluates the company’s cyber security strategies and processes.
• Participates as an independent resource on new systems development and implementation projects to ensure controls are properly designed and in place.
• May provide other team members, as relevant, with appropriate guidance during the course of project work.
• Ensures that Management and the audited party are kept up to date with audit status and the potential audit findings during the course of fieldwork.
• Takes the lead role on complex projects and works under guidance of a Manager or Director on some projects classified as having very high complexity.
• Over time, begins to take on responsibilities at the next level.
• Provides constructive feedback and concrete action steps to continually improve performance.
• Builds a good rapport and solid business relationships with the Zebra Management Team.
• Manage department key performance metrics and actively engage in the continuous improvement of the Internal Audit department
• Create reports that highlight areas where process or technology (i.e. IT infrastructure) may be improved
• Recommend changes to controls, processes, and procedures to ensure data integrity and security and improve operational efficiency and appropriate suggestions to achieve the improvements
• Prepare appropriate documentation (e.g. narratives, flowchart, control matrices, segregation of duties analyses, application controls, audit reports, etc.) in support of all assurance and consulting work performed.

Minimum Qualifications:

• Bachelors degree in Accounting Information Systems,
  Management Information Systems, Computer Science,
  Accounting, or other related Business degree
• 3+ years of experience with a leading public accounting /
  consulting firm (focused on IT audit, including at least 1 year
  of ERP controls auditing, consulting and/or implementing)
  Key Skills and Competencies:
• Command over risk and internal controls specific to
  information technology, including, but not limited to
  those risks and controls specific to system
  implementation / change management
• Completing tests around financial system controls compliance, IT General Computer Controls (ITGC), and Application Controls
• Conduct information security compliance to policy audits (e.g. ISO2700X, NIST, etc.) to evaluate risk, compliance, and control effectiveness, focusing on long-term strategies for a public company
• Thorough understanding of audit methodologies
  and processes (e.g., COSO, COBIT)

Preferred Qualifications:

• General knowledge of ISO 27000 and / or NIST is a
  plus.
• Experience auditing major ERP systems; Knowledge
  specific to Oracle ERP is a strong plus.
  • Demonstrates some understanding of ERP
    core financial modules, projects, some
    industry-specific modules and/or bolt-on
    products, and GRC technology.
  • Demonstrates some knowledge of security
    and control (including configuration) for ERP
    applications and/or technologies.
  • Demonstrates some knowledge of the
    design, implementation, and/or assessment
    of controls, including an understanding of
    the systems implementation lifecycle, as
    well as configuring and optimizing business
    process controls and application security
  • Demonstrates some understanding of
    business processes related to core ERP
    modules, including knowledge of industryspecific modules/products and/or direct
    experience configuring and implementing an
    ERP.
• Experience with auditing cyber-security and / or
  product security (IT security for technology
  products) is a plus.
• General knowledge of IIA Standards is a plus.
• Proficiency in PC-based computer systems, including
  Microsoft Office programs and Visio. Knowledge of
  audit software such as Teammate AM and ACL is a
  plus.
  • In addition to the core knowledge and skills noted
    above, the Senior IT Auditor should have the
    following areas of knowledge and / or skill:
  • Basic understanding of core business
    processes
  • Proficiency in auditing for potential fraud
  • Proficiency in data analytics procedures /
    techniques
  • Ability to evaluate risk impact and
    vulnerability
  • Ability to navigate through moderate levels
    of ambiguity and drive value-added
    recommendations
  • Solid communication skills with a sense of
    presence with the management team
    Position Specific Information
  • Travel Requirements: Travel is estimated at 10-15%, potentially including
    international travel.

Zebra is an equal opportunity/affirmative action employer committed to a diverse and inclusive workplace All qualified candidates will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identify, national origin, disability and protected veteran status or any other basis prohibited by law. If you are an individual with a disability and need assistance in applying for a position, please contact us at workplace.accommodations@zebra.com. We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform crucial job functions, and to receive other benefits and privileges of employment.

Know Your Rights:

https://www.eeoc.gov/sites/default/files/2022-10/EEOC_KnowYourRights_screen_reader_10_20.pdf

Conozca sus Derechos:

https://www.eeoc.gov/sites/default/files/2022-10/22-088_EEOC_KnowYourRightsSp_10_20.pdf

We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform crucial job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.

Zebra is a federal contractor and is committed to an alcohol and drug free workplace. As a result, all U.S. based employees are subject to the Drug and Alcohol Free Workplace Policy and Procedure.

Zebra Total Rewards includes more than just pay and is structured to meet the needs of our changing global business and evolving talent. We are committed to providing our employees with a benefits program that is comprehensive and competitive – including healthcare, wellness, inclusion networks, and continued learning and development offerings. We offer community service days, in addition to the traditional insurances, compensation, parental leave, employee assistance program and paid time off offerings depending on the country where you work.

Salary: USD 82500.00 - USD 123700.00 Yearly

Salary offered will vary depending on your location, job-related skills, knowledge, and experience.
Additionally, all Zebra roles are eligible for cash incentive programs. For example, sales roles have additional opportunity to earn substantial variable compensation tied to quota achievement. In most other roles, the Zebra annual cash incentive program links Company and individual performance together. Some roles may also be eligible for long-term incentive equity awards.