Build a better career with MSC. 
Serving customer and community starts with the very best people doing their very best work. That is precisely what we have at MSC Industrial Supply Co., a leading North American distributor of metalworking and maintenance, repair, and operations (MRO) products and services.

Requisition ID : 1904 

Employment Type : Full Time         

Job Category : Accounting/Audit/Finance                                             

Work Location :  Davidson, NC (CSC) 

State or Province : North Carolina (US-NC)     

Potential Work Location : United States : North Carolina : Davidson 

* This position can be based out of our Davidson, NC office OR our Melville, NY office*

BRIEF POSITION SUMMARY:

The IT Internal Audit Manager contributes to the mission of the Internal Audit function by promoting and ensuring an effective control environment through professional IT risk assessments, IT audits, awareness and education and consultation services. The IT Internal Audit Manager will have a deep understanding of risks associated with technologies, including AS400 and SAP, with proficiency in system security, change management and able to assess application level controls such as configurations, transfer of data from one environment to another and data integrity. This position is responsible for assisting the Director of Internal Audit in the development and execution of the IT Audit Plan and in the oversight of outsourced IT audit activities.

DUTIES and RESPONSIBILITIES:

• Build a technical and cross-disciplinary IT audit team.
• Perform IT risk assessments and assist in the prioritization of IT Audits.
• Plan, execute and report results of information system and technology audits across the company.
• Evaluate efficiency & effectiveness of IT and operational processes.
• Oversee IT SOX related testing program and coordinate with SOX IA management.
• Manage system development pre-implementation reviews and integration reviews for new acquisitions.
• Evaluate the adequacy of the security and processing controls as they relate to each audit, and the effectiveness of general computer controls in the IT environment.
• Provide technical guidance to audit and business unit personnel with respect to information systems, technology architecture, and security matters.
• Monitor the project status of disaster recovery testing, business continuity planning, and other activities related to IT processing.
• Manage the budget and deadlines for timely completion of audits.
• Ensure audit work papers prepared according to department guidelines and professional standards.
• Oversee outsourced resources to ensure a timely and efficient completion of audits.
• Present audit findings or other relevant information to key stakeholders on the effectiveness and adequacy of risk management, governance, and internal control procedures.
• Track management remediation and action items as a result of audit findings
• Actively develop, train, and supervise internal talent on a regular basis.
• Fosters the MSC Culture in the department and throughout the company to ensure fulfillment of MSC’s vision and unity of purpose.
• Participation in special project and performs additional duties as required.

EDUCATION and EXPERIENCE:

• Bachelor’s degree in Management Information Systems/Information Technology, Computer Science or Business (Accounting, Finance or related) required
• 6 years minimum experience in information security audit required AND at least 2 years supervisory experience required
• Experience in auditing applications, interfaces, system infrastructure, information processing and general IT controls; including such areas as:
  • application security management (user entitlements, authentication, accountability, data protection)
  • system architecture and design (availability, performance, scalability, data integrity)
  • technology operations (change management, data backup and retention, performance and capacity management)
  • technology governance (technology risk management, policies and procedures, rules, regulations, intellectual property)

• Experience with AS400 is preferred.
• Strong working knowledge of standard concepts and practices of internal auditing, particularly the Institute of Internal Auditor (IIA)’s Standards for the Professional Practice of Internal Auditing and the Information Systems Audit and Control Association’s Standards for Information Systems Auditing (ISACA)
• Understanding of leading risk and controls frameworks and standards such as COSO, COBIT, ITIL, NIST, CIS, etc.
• Familiar with reviews of reports of third party service providers (SOC 1, SOC 2 reports)
• Experience in evaluating the design and operating effectiveness of internal controls
• Experience in reviewing audit work papers
• Minimum CISA/CRISC, CITP designation or equivalent required
• Proficiency using software applications including query tools, databases, spreadsheets, word processing and presentation software (Microsoft Office, Visio, etc.)

SKILLS:

• Excellent verbal and written communications skills required.
• Highly organized and detail-oriented with ability to set priorities and to respond to changing demands from multiple sources in a fast-paced environment.
• Ability to effectively interface with management at all levels, as well as, contacts outside the organization such as external auditors
• Ability to follow through, meet deadlines, anticipate requirements and build relationships.

OTHER REQUIREMENTS:

• A valid driver’s license and the ability to travel up to 10% of the time may be required.

Why MSC  
People. Collaboration. Insight. That’s how you build something that works.

Built on a foundation of trust, MSC works side by side with our customers to help them drive business results. With more than one million product offerings and 75+ years of experience across industries, MSC strives to help our customers achieve greater productivity, profitability, and growth through inventory management and other innovative supply chain solutions. 

As one of America’s Best Large Employers (named in 2017 by Forbes magazine), we care about our associates and have programs in place to help our 6,000+ team members achieve their potential. When you join our team, you will receive rewards and recognition for your contributions, training and professional development opportunities, as well as a variety of benefits to support you and your family’s health, well-being, and financial future.

If you are inspired to learn, take risks, and succeed as a team, you can build a better career at MSC.

Equal Opportunity Statement 
All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, protected veteran status, sexual orientation or gender identity.                                                                                         

Tagged as: #sel

Source ⇲