Principal Technology Auditor

Responsibilities

This role will broadly support the Car Max Audit Services team through the development and execution of the department’s audit plan. This is a unique opportunity to build a strong understanding of Car Max’s technology and business processes as well as partner with teams throughout the organization in both an audit and advisory role. The variety of work provides ample opportunity to learn, grow, and mentor others and includes reviews of technology processes, applications, and infrastructure;

system implementations; emerging risks in areas such as security, privacy, artificial intelligence; and other operational audits and reviews of processes, policies and procedures. The Principal Auditor in Technology serves as a subject matter expert (“SME”) on complex projects, supports the development of technical skills of other auditors, and provides advisory risk management support.

As a Principal Technology Auditor, you’ll wear many hats such as thought leader, risk champion and advisor, project manager, coach, and brand ambassador. In all instances, you’ll leverage your broad experience with audit and consulting activities at a technology intensive organization to deliver results and partner with senior levels within the organization to enhance awareness and understanding of risk, controls, and risk mitigation best practices.

Technical expertise and collaboration are key to achieve outcomes in this ever changing, fast-paced environment.

Here are a few of the ways you’ll drive value at Car Max:

Provide assurance:

Execute and lead high-impact technology audits and reviews of various regulatory, operational and/or technological processes and controls, including integrated audits.

Collaborate as a trusted Risk Advisor:

Consult with a risk-based mindset across the organization to provide clear, strategic insights, guidance, and assurance to senior leaders throughout pre-implementation reviews, company initiatives, and other process and system enhancements as requested by the business; ensure controls are implemented to mitigate risks (operational, regulatory, reputational, strategic, and financial risk)

For each of the above, you will:

• Focus on areas of higher complexity, where deep experience and technical expertise is warranted, without close supervision or direction from CAS management.
• Partner with technology and initiative teams to stay informed on new product pipelines and initiatives, evaluate risks, and provide guidance on controls.
• Use and develop critical tools such as risk assessments, audit programs, and testing/review procedures so you can identify risk, tailor work appropriately, reach conclusions, and explore solutions.
• Lead and execute fieldwork to prepare high-quality work papers summarizing procedures performed.
• Maintain strong business relationships and coordinate cross-functionality to align on risk, scope of work and results.
• Promote innovative and forward-looking problem solving to target root cause; provide recommendations contributing to operational excellence.
• Leverage your creativity to organize and present key project information through a variety of communication methods and tools, focusing on high-impact, high-value deliverables.

Provide technical guidance and assistance:

• Help lead the research and analysis of emerging technology and technology/cyber/data-related regulatory standards. Partner with technology management and other business partners to assess the impact of the technologies, tools and changing regulations (as applicable) on Audit Services and Car Max.
• Support the development and execution of training materials/content within the department and to external business partners, as needed to help implement the team’s strategic priorities.
• Provide technical knowledge and direction in the assessment of risk and development of audit scoping for very complex projects.

You will also foster an environment of continuous improvement by:

• Championing a culture of risk awareness and internal controls. You will provide innovative and value-added insights to drive improved process efficiency and effectiveness for Car Max.
• Staying abreast of key changes, trends, and best practices…