Nắm bắt đổi mới.
Tạo ra các khả năng mới.

Location

Position is based in Wayzata, Minnesota or Atlanta, Georgia.

Job Purpose and Impact

• The Digital Technology and Data (DT&D) Audit Risk Advisor job leads and drives the organization's IT risk assessments and IT audit planning. As a recognized subject matter expert in digital technology and data risk and controls, this job leads and advises on domain risk assessments, focusing on emerging and innovative risks, and prioritizes the organization's audit activities. This job partners strategically with the Audit Leadership team, Enterprise Risk Management Team, Risk Advisors and key stakeholders within the DT&D organization to ensure cohesive and well-coordinated execution of the continuous risk assessment, audit planning and issue management processes.

Key Accountabilities

• RISK EVALUATION: Leads the evaluation of digital technology and data risks that could prevent the organization from achieving strategic objectives, applying advanced knowledge and understanding of the risk landscape to bridge the gaps between seemingly disparate data points and strategies.
• RISK ASSESSMENT DELIVERY: Leads and advises on delivering high quality risk assessments and project proposals in alignment with the organization's defined audit methodologies.
• RISK REPORTING: Communicates risk trends and assessment conclusions, and facilitates risk assessment sessions with business leadership, acting as a key partner with the objective to advise the businesses and influence decisions on risk evaluation and mitigation.
• DOCUMENTATION: Leads and advises on maintaining detailed risk assessment results including risk ratings, risk summaries and dashboard reporting.
• COLLABORATION: Partners collaboratively with business and function leaders to maintain knowledge of internal developments within the risk domain, including key initiatives and transformation efforts.
• CONTINUOUS IMPROVEMENT: Maintains knowledge of external trends, emerging and innovative risks to inform risk assessments, and identifies and implements techniques to monitor and measure risks using data analytics.
• AUDIT PLANNING: Lead the development, reviews and approvals of individual project proposals for each IT audit in the annual audit plan. Coordinate with the Audit Leadership, key DT&D stakeholders and the IT audit co-source partner on scope approach, timeline, methodologies, frameworks, resources, budgets and stakeholder to support audits. Coordinate effective communication with audit's stakeholders to drive effective and efficient execution of IT audits. 
• ISSUE MANAGEMENT: Coordinate end-to-end issue management responsibilities for all DT&D audit issues resulting from the execution of the annual IT audit plan to drive timely remediation of issues. This includes periodic follow-ups with issue owners, review of documentation provided to support the remediation of audit issues, review and assessment of relevant compensating controls and mitigating factors and coordination of risk acceptance, where applicable. Supports the Audit Leadership Team to prepare Audit Committee materials related to open IT audit issues on an ongoing basis. 

Qualifications

MINIMUM QUALIFICATIONS

• Minimum requirement of 6 years of relevant work experience. Typically reflects 10 years or more of relevant experience.
• Proven understanding of IT risk and control frameworks such as COSO, COBI, ITIL, ISO, NIST CSF. 
• Demonstrated professional experience with leading IT audit, IT operations and/or enterprise risk management risk assessment activities. Demonstrated commitment to staying apprised of leading practices. 
• Ability to travel globally up to 25% of the time. 

PREFERRED QUALIFICATIONS

• Experience working in a global organization; ability to navigate the complexities of global operations and cross-cultural collaboration. 
• Certified Information Systems Auditor (CISA), Certified Information Systems Security Professional (CISSP) or other IT risk management certification. Experience working with cloud security frameworks and migrations, SAP ERP IT general controls and data management/government processes and controls.
  #LI-LB1  #FGB  #themuse

Compensation Data