Sr Mgr, IT Audit

PS Job Title: Sr Mgr, IT Audit

Work Place Flexibility: Hybrid 

Legal Entity: Entergy Services, LLC 

The IT Audit Senior Manager role will involve establishing strategic relationships with leaders throughout the company to proactively manage risks, improve internal controls, and drive value added outcomes that align with Entergy's vision and mission. The IT Audit Senior Manager will co-lead execution of the risk assessment process and audit plan. The role is also responsible for leading and ensuring the audit teams are using the latest approved practices, tools, and technology to evaluate the adequacy, effectiveness, and completeness of internal controls needed to minimize risk.

• Continuously assess risk and trends that could impact the company's strategic and business objectives. Conduct customer engagement meetings with executive and senior leaders to gain an understanding of their key business objectives and risk concerns. Help with the development and implementation of a dynamic audit plan that reduces risk for the company and that facilitates achievement of management's business and strategic objectives.
• Provide guidance to key company stakeholders to mitigate information technology (IT)/Cybersecurity risk and enhance IT/Cybersecurity internal controls. Set policy objectives over new technologies (like AI technologies, Robotic Processing Automation (RPA) and cloud hosting), people and processes. Recommend better practices to improve controls and results. Influence and advise process owners on practices that result in value (reduction of costs or risks).
• Co-lead the development and execution of the Internal Audit Strategic Plan.
• Directly manage a team of audit professionals to ensure projects are executed with the highest quality, on time, and in accordance with the IIA and other pertinent professional standards.
• Manage the co-sourced contract and audit partner hired to execute highly technical information technology projects.
• Review and approve audit reports, ensuring they are accurate, clear, concise, and relevant such that recipients readily understand issues and risks. Develop and deliver effective and persuasive presentations on complex topics to senior management.
• Manage and continuously improve the audit processes, people, and tools to meet all the IIA standards and other compliance standards while also providing value, efficiencies, and flexibility. Develop, coach, and mentor diverse audit team members.
• Utilize department resources effectively and efficiently to create value for the business. Establish measures and monitor performance of the audit teams. Assess Information Technology General Controls, Security controls, and the effectiveness of the SOX 404 control program. Provide assurances to management regarding the effectiveness of the IT/Cybersecurity control environment.
• Manage and continue to evolve the automation and data analytics program.
• Coordinate and work effectively with the external auditors, internal compliance groups (Chief Security Office, Cybersecurity, and IT) and governance committees (IT/Cybersecurity3 Lines of Defense, Third Party Management, etc.).

Minimum education required of the position

• Bachelor's Degree in Accounting, Business, Computer Science or related field; advanced degree a plus

Minimum experience required of the position

• Minimum of 10 years of audit experience; IT audit or IT security experience is a plus
• 5 years of managerial experience is a plus

Minimum knowledge, skills and abilities required of the position

• Requires experience with IIA Audit Standards and best practices, implementation and support of Sarbanes-Oxley 404 control program, knowledge of IT general controls, COSO framework, Service Organization Control reports, ISACA and practices for information systems, NIST and other cyber risk frameworks, and CoBit or other leading control frameworks. Must have experience with data analytics tools to query data and support audits.
• Requires a detailed understanding of key technology tools and necessary controls, such as Data Loss Prevention, Threat and Vulnerability Management, Cloud Risk and Controls using CASB, RPA Bots, Identity Management, Application vulnerability scanners, Separation of Duties for IT functions, Change Management, PII Data, audit trails and trending, Vendor SLA management, etc.

Any certificates, licenses, etc. required for the position

Required designation as CIA, CISA, CISSP, CPA, or CFE; multiple designations is a plus

• Functional Knowledge: Requires an in-depth understanding of the application of audit principles, practices, concepts, and theories for financial, information technology, and operational processes as well as a knowledge of utility industry and risks.
• Business Expertise: Applies understanding of how to improve controls and mitigate risks for business processes and information technology that is accepted as a positive improvement by the business stakeholders.
• Leadership: Manages the audit team to complete the audit plan projects; sets measures and goals to evaluate team member's performance; adapts plans and priorities to complete the audit plan commitment to the audit committee.
• Problem Solving: Identifies sources of risk and opportunities for improving internal controls, business processes and information systems. Routinely uses root cause analysis to recommend impactful business changes. Obtains confidence from the functional business to implement the improvements.
• Impact: Recommends changes to stakeholders' business function that are recognized as adding value to the business such that the business functions seek out the advice and recommendations. Guided by latest industry best practices, policies, resource requirements, budgets and the business and audit plan.
• Interpersonal Skills: Exudes confidence based on knowledge and experience, influences, and persuades others either internally in other areas or externally with stakeholders, external auditors, or co-sourced auditors.

• Not all aspects of the job are covered by the description – may require "other duties as assigned"
• Job may change over time in accordance with business needs
• Job description does not guarantee employment

Primary Location: Louisiana-New Orleans Louisiana : New Orleans 
Job Function: Corporate
FLSA Status: Professional 
Relocation Option: No Relocation Offered
Union description/code: NON BARGAINING UNIT 
Number of Openings: 1
Req ID: 125370
PS Job Title: Sr Mgr, IT Audit 
Travel Percentage:Up to 25%

An Equal Opportunity Employer, Minority/Female/Disability/Vets. Please click here to view the EEO page, or see statements below.

EEO Statement: The Entergy System of Companies provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, gender, sexual orientation, gender identity or expression, national origin, age, disability, genetic information, marital status, amnesty, or status as a protected veteran in accordance with applicable federal, state and local laws. The Entergy System of Companies complies with applicable state and local laws governing non-discrimination in employment in every location in which the company has facilities. This policy applies to all terms and conditions of employment including, but not limited to, recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training. 

The Entergy System of Companies expressly prohibits any form of unlawful employee harassment based on race, color, religion, sex, gender, sexual orientation, gender identity or expression, national origin, age, genetic information, disability, or veteran status. Improper interference with the ability of the Entergy System of Company employees to perform their expected job duties is absolutely not tolerated.

Accessibility: Entergy provides reasonable accommodations for online applicants. Requests for a reasonable accommodation may be made orally or in writing by an applicant, employee, or third party on his or her behalf. If you are an individual with a disability and you are in need of an accommodation for the recruiting process please click here and provide your name, contact number, the accommodation requested and the requisition number that you are requesting the accommodation for. Employee Services will contact you regarding your request.

Additional Responsibilities: As a provider of essential services, Entergy expects its employees to be available to work additional hours, to work in alternate locations, and/or to perform additional duties in connection with storms, outages, emergencies, or other situations as deemed necessary by the company. Exempt employees may not be paid overtime associated with such duties.

Know Your Rights: Workplace Discrimination is Illegal

The non-confidential portions of the affirmative action program for individuals with disabilities and protected veterans shall be available for inspection upon request by any employee or applicant for employment.  Please contact HRCompliance@entergy.com to schedule a time to review the affirmative action plan during regular office hours.

WORKING CONDITIONS:
As a provider of essential services, Entergy expects its employees to be available to work additional hours, to work in alternate locations, and/or to perform additional duties in connection with storms, outages, emergencies, or other situations as deemed necessary by the company. Exempt employees may not be paid overtime associated with such duties.

Please note: Authorization to work in the United States is a precondition to employment in this position. Entergy will not sponsor candidates for work visas for this position.