This position is part of the Audit Tech team and is designed to test whether security controls protect the confidentiality, integrity, and availability of Union Pacific (UP) computer systems. Our audits are highly technical reviews of critical systems, databases, web technologies, software, and more.

The Audit Tech team is part of UP's Corporate Audit department. We assess UP's ability to protect against high-risk cyber threats and report our results to the Board of Directors.

Our team members have backgrounds in computer security, penetration testing, and application development. We strive to stand out in the industry by taking deep-dive security reviews with a risk-based approach.

We encourage members of the Audit Tech team to expand their knowledge through certifications (OSCP, CISSP, CISA, GIAC, etc) and advanced degrees. We strive to ensure team members get wide-ranging experiences across all areas of IT rather than simply enhance their existing skills.

• Use a risk-based approach to audit the security of critical computer systems.
• Conduct penetration tests and source code reviews.
• Communicate audit results to management.
• Continuously improve skills to stay sharp in the ever-changing world of IT security.
• Perform other duties as assigned.

• A bachelor's degree in Information Assurance, Cybersecurity, Computer Science, Computer Engineering, or Management Information Systems.
• Minimum of two (2) years Technology Audit or other relevant professional experience. Financial services and/or Big 4 Accounting experience a plus.
• Knowledge of computer security methods and techniques, as well as hands-on experience with essential tools including Active Directory, Git, Python, and the Linux command line.
• Strong analytical skills and the ability to assess complex IT systems and processes.
• In-depth knowledge of IT control frameworks, risk assessment methodologies, and regulatory requirements (e.g., SOX, CIS, MITRE).
• Understanding of risks and internal controls and the ability to evaluate and assess the adequacy and effectiveness of controls.
• Knowledge of operating systems, databases, networking concepts, and programming languages.
• Advanced communication and interpersonal skills with the ability to customize messages to appropriate audience.
• Advanced time management skills.

• A post-graduate degree (MBA, JD, etc..) or higher.
• Two years of experience in Auditing, Finance, or other relevant professional experience.
• Certified Information Systems Auditor (CISA), Certified Internal Auditor (CIA), or Certified Information Systems Security Professional (CISSP).

• This position requires extended periods of sitting and extended hours in front of computer screens.
• Ability to maintain concentration, focuson tasks and make timely decisions.

• Standard office environment.