Principal IT SOX Internal Auditor

Company: Symantec
Location: Tempe
Posted on: February 16, 2020

Job Description:

About NortonLifeLockNortonLifeLock Inc. (NASDAQ: NLOK) is a global leader in consumer Cyber Safety. NortonLifeLock is dedicated to helping secure the devices, identities, online privacy, and home and family needs of its nearly 50 million consumers, providing them with a trusted ally in a complex digital world. For more information, please visit NortonLifeLock.com at https://www.nortonlifelock.com/ or connect with us on Facebook at https://www.facebook.com/NortonLifeLock/posts/121778255910526 , Twitter at https://twitter.com/NortonLifelock , LinkedIn , Instagram at https://www.instagram.com/nortonlifelock/ and YouTube at https://www.youtube.com/channel/UCa3h96az7881wsRH5uoTxuQ .Job Title: Principal IT SOX Internal AuditorLocation: Tempe, AZJob descriptionWe are in search of an IT SOX Compliance professional to play an important role in NortonLifeLocks Global Internal Audit team, and to support our SOX Compliance in Tempe, AZ.The ideal candidate will have 7 plus years of IT audit experience in industry and/or public accounting. He or she should have a good understanding of both SOX IT, Business Processes and Control. Additional, knowledge of the IT Risks landscape, ERP, Applications, Infrastructure, SDLC methodologies, IT security Frameworks and Standards, System Integration, Pre & Post Implementation reviews, Data Security Assessments etc. Their primary responsibility will be to lead the IT SOX efforts, assist with scoping, risk assessments, IT control testing, and deficiency evaluations. This role provides a successful candidate with the opportunity to collaborate with upper management and build valuable experience in evaluating IT controls and processes in a complex IT environment. The position also allows the candidate the ability to participate in IT Operational Audits.Responsibilities:

• Coordinate IT SOX efforts and build strong working relationships with IT application owners, business process owners, management, and the global audit team
• Coordinate IT SOX efforts and interact with external auditors for walkthroughs, testing, deficiency evaluations, etc.
• Lead other staff auditors IT testing including reviewing workpapers
• Collaborate with IT and Business Stakeholders in updating IT controls and processes
• Design and execute audit procedures to evaluate the effectiveness of:
  • IT Application Controls include configuration and access (segregation of duties) in Oracle, cloud and internally developed software applications
  • IT General Controls
  • Design and execute audit procedures to evaluate the accuracy and completeness of System Reports and End User Computing Spreadsheets
  • Collaborate with process and control owners for impact assessment of identified deficiencies, as well as remediation of identified deficiencies, advising them on internal control enhancements or process changes
  • Evaluate control deficiencies in accordance with SEC Guidance for Management
  • Assist in providing IT SOX Compliance training to IT and audit staff
  • Perform IT process and control risk assessments for system implementation or integration projects
  • Remain current with IT Security standards, audit issues and other industry best practices
  • Participate in IT Operational Audits
    • Scoping and Planning, execute audit fieldwork autonomously in accordance with audit work programs and provide improvement recommendations
    • Draft clear and meaningful findings, audit reports, presentations, and other materials for Sr. Management and the BoardQualifications:
      • Degree in Management Information Systems, Computer Engineering, Computer Applications or other relevant field of study
      • CISA, CA, CPA, CIA, or CFE preferred
      • Minimum of 7+ years of Audit Experience, with 3+ year of IT SOX testing
      • Big 4 Experience or Oracle ERP Consulting preferred
      • Strong understanding of COBIT Framework and COSO 2013 Internal Control Framework,
      • Understanding of US GAAP, SOX 404, PCAOB, SEC guidance and ISO 27001 framework
      • Understanding of fundamental business processes, risks, controls, and security controls (e.g., Access Management, Logical and Physical Security, Networking security standards, ISO standards, Data Privacy and security best practices)
      • Experience in evaluating IT General Controls, IT Application Controls, and System Generated Reports
      • Experience testing Oracle R12 required
      • Working knowledge of Cloud models (e.g. SaaS, Paas, Iaas, etc.) including controls and processes for operating within the Cloud
      • Knowledge of Business Objects, SFDC, HFM, RevPro, Oracle Cloud or other financial reporting tools preferred
      • Experience with GRC tool to perform Access and SOD testing (such as Oracle GRC/AACG) preferred
      • Proficient with Microsoft Excel, Word, PowerPoint, and Visio
      • Effective oral and written communication skills
      • Drive for value added results
      • Positive Mindset to change and adaption
      • Ability to travel 5-10% of the time#LI-AM1NortonLifeLock is proud to be an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive and accessible environment for all employees. All employment decisions are based on merit, experience, and business needs, without regard to race, color, national origin, age, religion, sex, pregnancy (including childbirth or related medical conditions), genetic information, disability (physical or mental), medical condition, marital status, sexual orientation, gender identity or gender expression, military or veteran status, or any other consideration made unlawful by federal, state, or local law. NortonLifeLock strictly prohibits unlawful discrimination based on such protected characteristics and seeks to recruit the most talented candidates from diverse cultures and backgrounds.We also consider for employment qualified individuals with arrest and conviction records. In addition, NortonLifeLock will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. Learn more about pay transparency at https://www.dol.gov/ofccp/pdf/pay-transp_formattedESQA508c.pdf .EEO is the law. Applicants and employees of NortonLifeLock Inc. are protected under Federal law from discrimination. See the EEO poster at https://www.dol.gov/ofccp/regs/compliance/posters/pdf/eeopost.pdf and supplement at https://www.eeoc.gov/employers/upload/eeocginasupplement.pdf .NortonLifeLock Inc. (NASDAQ: NLOCK) is a global leader in consumer Cyber Safety. NortonLifeLock is dedicated to helping secure the devices, identities*, online privacy, and home and family needs of its nearly 50 million consumers, providing them with a trusted ally in a complex digital world. For more information, please visit NortonLifeLock.com or connect with us on Facebook at https://www.facebook.com/NortonLifeLock/posts/121778255910526 , Twitter at https://twitter.com/NortonLifelock , LinkedIn , Instagram at https://www.instagram.com/nortonlifelock/ and YouTube at https://www.youtube.com/channel/UCa3h96az7881wsRH5uoTxuQ .NortonLifeLock is committed to requests for reasonable accommodations to assist you in applying for positions at NortonLifeLock including resume submissions. If you need to request an accommodation, please contact HR Service Exchange at https://symantec.service-now.com/hrp/ .*LifeLock identity theft protection is not available in all countries.

Keywords: Symantec, Phoenix , Principal IT SOX Internal Auditor, Accounting, Auditing , Tempe, Arizona