IT & Cybersecurity Audit - Manager

Job Title:

IT & Cybersecurity Audit - Manager

Department:
Internal Audit Department

Reports To:

Internal Audit - IT Audit & Cybersecurity – Senior Manager or Director

Location:

Corporate Headquarters, Wallingford, CT

As an integral member of the Internal Audit team, the IT & Cybersecurity Audit Manager will support the company’s internal audit functions, including evaluating the effectiveness of the company's IT and Cybersecurity internal controls. This role is crucial in ensuring the integrity, reliability, and security of our IT systems and working directly with our operations to ensure our cyber security posture is designed and operating effectively to prevent cyber-attacks.

Additionally, while supporting the overall governance, risk management framework of the company. The ideal candidate will bring a keen analytical mindset, robust technical knowledge, and a proactive attitude to effectively assess IT processes and controls. This is an exciting opportunity to build your skills in IT security, IT Controls, Compliance and Risk Management while contributing to impactful projects in a business setting.

• Assist the Senior IT Audit Manager or Director in executing an integrated, value-adding IT audit function via IT General Controls and Cyber Security Controls
• Execution of global system-wide risk management function of the information security program to ensure information security risks are identified and monitored. Audit of individual IT audit engagements including operational audit and SOX testing including planning, performing and analyzing audit results using an integrated audit approach which concentrates on high-risk areas, and review of both operational and IT & cyber security controls.
• Assist the IT Audit Director to create and perform entity-level risk assessments, Risk Matrix, and Control Matrix.
• Understand potential risk in processes and cyber security relating to each business unit.
• Develop the IT & Cybersecurity audit plan and act as a thought-partner for the Global Audit Director in preparing audit strategy for other technology audit areas to collectively form the annual, risk-based internal audit plan.
• Planning of the IT audit, including:
  • Schedule IT audits and other projects based on risk assessment, business unit needs and other priorities.
  • Design and follow appropriate risk-based audit procedures and work plans to ensure the objectives of each audit are achieved.
  • Lead the planning, scoping and execution of audit and consulting projects, including guiding the development of new audit work programs in data privacy and cybersecurity.
• Execution of the IT & Cybersecurity audit, including:
  • Interact with local IT Management (whether internal and/or co-sourced), Finance team and Management teams to understand the business.
  • Recommend programmatic and technical directions and operate with a high degree of independence in matters relating to the investigation, impact, and analysis of security incidents, decisions regarding risk, and measures for compliance.
  • Internally assess, evaluate and make recommendations to management regarding the adequacy of the security controls for the Global Amphenol information and technology systems.
  • Schedule and conduct detailed audits of information technology systems and infrastructures to verify systems are secure and support the related applications or business processes.
  • Ensure work paper documentation supports auditing conclusions.
  • Audit controls over existing systems and ensuring full compliance with regulatory guidance and internal policies & procedures.
• Analyzing and reporting the results, including:
  • Prepare and present final audit reports to local and senior management to discuss areas of risk identified, processes weaknesses, areas of risk, recommendation to mitigate that risk.
  • Evaluate related action plans and process improvement opportunities with local management.
  • Manage the IT audit findings log to ensure Internal Audit follow-up with management and to ensure management action plans are implemented satisfactorily. Escalate discrepancies directly corporate management to determine the reasonableness and appropriateness of remediation…