Associate Principal - Information Technology & Security Audit

Role Overview

Associate Principal – Information Technology & Security Audit at Elm, reporting to the Internal Audit division's IT Audit department.

Role Purpose

Responsible for the day-to-day internal auditing of Elm's information technology audit controls and systems, ensuring successful completion of assigned audit engagements from start to finish, including preplanning and wrap-up activities, according to Elm's policies and procedures.

Key Responsibilities

Daily Operations

• Follow day-to-day operational requirements to ensure continuity of work.
• Contribute to identification of opportunities for continuous improvement of processes and practices, taking into account international best practice.
• Drive improvement of business processes, cost reduction and productivity improvement.
• Assist in preparation of timely and accurate reports of the Internal Audit department to meet company and department requirements, policies and standards.

Auditing Procedures

• Ensure that risk and control concepts and internal audit standards are applied to scenarios encountered and identify any potential issues.
• Communicate identified issues with the IT Audit department manager to ensure any potential concerns are addressed in a timely and effective manner.
• Plan annual audit engagements and measure estimated timelines for completion.
• Prepare process mapping, conduct risk assessment and develop audit programs.
• Perform audit fieldwork, prepare audit reports and conduct discussions with process owners as per recommended IIA standards.
• Review and assess Elm's processes, technologies (applications, network, database, operating system, etc.), practices and related procedures according to the annual audit plan.
• Perform management, information systems and technologies, IT and information security audits across all company locations to review and evaluate the effectiveness of operations, confidentiality, integrity and availability of information and compliance with applicable laws and regulations.

Policies, Processes & Procedures

• Follow all relevant departmental policies, processes, standard operating procedures and instructions to ensure work is carried out in a controlled and consistent manner.
• Comply with all relevant safety, quality and environmental management policies, procedures and controls to ensure a healthy and safe work environment.

Information Security

• Comply with all relevant information security practices and standards to ensure data integrity and confidentiality.

Qualifications & Experience

• Bachelor degree in Computer Science and/or Master degree in Business, Finance or IT.
• Successfully completed IT audit related certifications such as CISA, CRISC, CGEIT or CISM.
• 6 to 8 years of relevant experience in a related industry.