Sr Cyber & IT Auditor

Senior Cyber & IT Auditor

This role requires the ability to work lawfully in the U.S. without employment-based immigration sponsorship, now or in the future.

Do you thrive on uncovering risks in technology systems and driving improvements in cyber security practices? As a Senior Cyber & IT Auditor at Spectrum, you will execute top-tier internal audit results under the guidance of IT Audit Managers and Directors. You will work closely with audit leadership on key areas like performing IT risk evaluations, assessing business continuity and disaster recovery, and reviewing internal controls, policies, and regulations related to Spectrum's electronic assets.

How You'll Make an Impact

• Execute planning, fieldwork, and reporting for specific IT projects established in the annual audit plan in accordance with audit standards, guidelines, and best practices.
• Execute projects related to the NIST Cybersecurity Framework, NIST 800 series, CIS Controls, ISO 27001/27002, OWASP, Payment Card Industry, Data Privacy, IT General Controls (ITGC), and other laws and regulations governing the corporation.
• Prepare audit summaries and present results to senior IT management, providing observations and evaluating management action plans, and report.
• Keep abreast of relevant business developments and evolving IT risk areas.
• Contribute ideas and opinions to the internal audit team by identifying relevant controls to include in an audit's scope.
• Design audit programs/procedures to assess their adequacy and assist financial/operational auditors in applying IT audit principles and concepts.
• Develop and maintain effective relationships within the team and individuals throughout the organization.

Working Conditions

• Office environment
• Expected travel is approximately 10-15%

What You'll Bring to Spectrum

Required Qualifications

• Bachelor's degree in Information Technology, Business, Accounting, or Finance or equivalent combination of education and experience
• 3+ years of experience in IT audit or public accounting
• Experience with various technologies, including networks, platforms, and applications
• Experience in information security assessments

Skills

• Ability to read, write, speak and understand English
• Ability to define effective audit plans and cultivate channels of communication that align well with key stakeholders and effectively influence at all levels of the organization, including experienced IT auditors
• Understanding of business processes, financial reporting, and information technology audit and control frameworks such as SOX, COBIT, ITIL, and PCI
• Knowledge of risk assessment and familiarity with tools and techniques used to provide control and monitoring mechanisms
• Knowledge of IT audit methodologies and control frameworks of IT platforms, processes, systems, and controls, including areas such as network security, logical access, and change management controls at an infrastructure and application level, databases, and systems maintenance
• Knowledge of cable television products and services, various network architectures, services, systems, applications, development platforms, network/security technologies, and web application security including cross-site scripting and SQL injection
• Proficiency in information security tools to exploit vulnerabilities in networks and applications

Preferred Qualifications

Education

• CISA, CIA, CISSP, CISM, CEH, GPEN, OSCP, CPT and/or MBA

Experience

• Big 4 experience

Skills

• Knowledge of PCI Standards, HIPAA, and security