Program Coordinator (IS Compliance)- Core Services

SUMMARY

The Program Coordinator - IS Compliance serves as an interface in the Cybersecurity and Risk Management Portfolio in the IS department as 2nd Line practitioner, assisting Program Manager - IS Compliance working with individuals with 1st Line internal controls responsibilities, our companys Internal Audit department as well as external auditors and third party risk of critical suppliers, with the goal of documenting and demonstrating compliance with our system of internal control, empowering and accelerating IS department audit programs through industry standard audit methodologies and providing systematic visibility to health and performance. The ideal candidate will have an understanding of audit fundamentals, the COSO and COBIT framework and Internal Controls over financial reporting, with an aptitude and desire to apply audit fundamentals and pursue greater audit knowledge. Additionally, this role will be filled by an excellent communicator with project management and analytic aptitude, with the ability to communicate critical audit matters to management, identify trends and avoid issues.

This positions primary responsibilities are to assist 1st Line and manage the details of the IS audit as a 2nd Line Program Coordinator - IS Compliance, focusing on compliance with the Sarbanes-Oxley (SOX) requirements. The Program Coordinator - IS Compliance will work in a dynamic international environment and will interact with different groups in order to perform various internal IS audit activities.

KEY RESPONSIBILITIES

• Maintain list of all risks, controls and procedures related to the departments audit activities, work with control performers and risk owners to ensure timeliness and accuracy of results and successful completion of audit.
• Support interim and final IS audit procedures around IT general and application controls and provide support on the completion of these procedures, meeting with the internal and external auditors frequently toward the end of audit periods.
• Assist with identifying and assessing IS risk & relevant controls, including participation in annual risk and control reviews.
• Review and perform QA over audit evidence, relevant processes, and procedural documentation before submitting to the auditors.
• Facilitate internal and external audit walkthroughs of IT controls alongside process/control owners.
• Assist and support 1st Line with identifying and documenting issues identified during audit and developing remediation plans for improvement.
• Documenting, managing and maintaining IS audit programs, procedures and artifacts.
• Ensuring control performers and risk owners’ understanding of control objectives, artifacts and control health.
• Measuring and identifying cybersecurity risk associated with critical clients and suppliers.

ESSENTIAL EXPERIENCE

• Bachelor’s degree in information systems, Accounting, Business, or in a relevant field
• Understanding of and experience with the Sarbanes-Oxley (SOX) compliance requirements, the COSO and COBIT frameworks and the Governance, Risk and Compliance (GRC) management models
• Understanding NIST Cybersecurity frameworks, CMMC
• Critical thinking/problem solving skills
• Strong verbal and written communication skills
• Excellent project management skills
• Data visualization skills for highlighting and trending control performance
• High level of integrity, ownership, accountability and initiative
• Knowledge of the basic nature of auditing, enterprise IT environment and information system concepts, and IT audit principles and practices a plus
• Certification preferred (CISA, CPA, CIA)
• 3+ years IT audit experience, through public accounting/auditing and/or industry experience.

REPORTING STRUCTURE

• Team Manager, CSRM Portfolio