IT & Cybersecurity Audit - Manager

Job Title: IT & Cybersecurity Audit - Manager

Department: Internal Audit Department

Reports To: Internal Audit - IT Audit & Cybersecurity – Senior Manager or Director

Location: Corporate Headquarters, Wallingford, CT

Salary Range: $100,000-$130,000 annually

Overview

As an integral member of the Internal Audit team, the IT & Cybersecurity Audit Manager will support the company’s internal audit functions, including evaluating the effectiveness of the company's IT and Cybersecurity internal controls. This role is crucial in ensuring the integrity, reliability, and security of our IT systems and working directly with our operations to ensure our cyber security posture is designed and operating effectively to prevent cyber-attacks. Additionally, while supporting the overall governance, risk management framework of the company. The ideal candidate will bring a keen analytical mindset, robust technical knowledge, and a proactive attitude to effectively assess IT processes and controls. This is an exciting opportunity to build your skills in IT security, IT Controls, Compliance and Risk Management while contributing to impactful projects in a business setting.

Key Responsibilities

• Assist the Senior IT Audit Manager or Director in executing an integrated, value-adding IT audit function via IT General Controls and Cyber Security Controls.
• Execution of global system-wide risk management function of the information security program to ensure information security risks are identified and monitored. Audit of individual IT audit engagements including operational audit and SOX testing including planning, performing and analyzing audit results using an integrated audit approach which concentrates on high-risk areas, and review of both operational and IT & cyber security controls.

Risk Assessment, including:

• Assist the IT Audit Director to create and perform entity-level risk assessments, Risk Matrix, and Control Matrix.
• Understand potential risk in processes and cyber security relating to each business unit.
• Develop the IT & Cybersecurity audit plan and act as a thought-partner for the Global Audit Director in preparing audit strategy for other technology audit areas to collectively form the annual, risk-based internal audit plan.

Planning of the IT audit, including:

• Schedule IT audits and other projects based on risk assessment, business unit needs and other priorities.
• Design and follow appropriate risk-based audit procedures and work plans to ensure the objectives of each audit are achieved.
• Lead the planning, scoping and execution of audit and consulting projects, including guiding the development of new audit work programs in data privacy and cybersecurity.

Execution of the IT & Cybersecurity audit, including:

• Interact with local IT Management (whether internal and/or co-sourced), Finance team and Management teams to understand the business.
• Recommend programmatic and technical directions and operate with a high degree of independence in matters relating to the investigation, impact, and analysis of security incidents, decisions regarding risk, and measures for compliance.
• Internally assess, evaluate and make recommendations to management regarding the adequacy of the security controls for the Global Amphenol information and technology systems.
• Schedule and conduct detailed audits of information technology systems and infrastructures to verify systems are secure and support the related applications or business processes.
• Ensure work paper documentation supports auditing conclusions.
• Audit controls over existing systems and ensuring full compliance with regulatory guidance and internal policies & procedures.

Analyzing and reporting the results, including:

• Prepare and present final audit reports to local and senior management to discuss areas of risk identified, processes weaknesses, areas of risk, recommendation to mitigate that risk.
• Evaluate related action plans and process improvement opportunities with local management.
• Manage the IT audit findings log to ensure Internal Audit follow-up with management and to ensure management action plans are implemented satisfactorily. Escalate discrepancies directly corporate management to determine the reasonableness and appropriateness of remediation plans.
• Review the status of corrective actions taken to improve deficient conditions as generally recommended.
• Conduct advanced penetration and vulnerability tests on a company's system and identify any breaches or weaknesses in the security setup.
• Plan, implement, manage, monitor and upgrade security measures for the protection of the organization’s data, systems and networks.
• Troubleshooting problems associated with our security and network, including handling any system breaches.

Qualifications

• Education:
• Bachelor’s degree in management information systems, Computer Science, IT or related STEM discipline.
• Certification is required - CISA, CISSP, CISM, CICA, CIA, CCSP, CEH, CompTIA Security , SSCP.
• Experience:
• At least 4 to 6 years of experience in IT Auditing, Cybersecurity, IT security experience and expertise, often within a public accounting firm or large corporate internal audit or IT department.
• Ability to multi-task in a fast-paced, dynamic environment.
• Strong analytical skills - ability to analyze and detect trends, issues or flaws; determine root case of issues; and partner with others to drive solutions.
• Excellent communication and report writing skills.
• Knowledge of information security risk management frameworks and compliance practices.
• Experience responding to, analyzing, and communicating information security incidents.
• Excellent interpersonal, communication, and presentation skills, including report writing experience.
• Attention to detail, QA skills, the ability to “think forward,” adept at problem solving and addressing issues and complications before they expand.
• Experience with and knowledge of hardware and software, networks, data centers, systems and other related areas related to cyber security.
• Conscientiousness and excellent time management skills.
• Fluent in Mandarin, Spanish or other European Language is a plus.
• Between 25%-50% travel is required.