IT Auditor

Overview

Cobb EMC has an exciting opportunity for an IT Auditor to lead all phases of assigned information technology internal audits and other related audits across Cobb EMC and its subsidiaries, including Gas South, from planning, fieldwork, reporting, and monitoring the status of recommendations. Leverage technology to conduct assigned continuous auditing, data analysis, and compliance oversight. Assist with other department activities to evaluate and improve the effectiveness of risk management, internal controls, and governance of Cobb EMC and its subsidiaries.

Schedule:Monday-Friday 7am-4pm OR 8am-5pm (Hybrid 3 days in office and 2 days remote after training, based on workload or business needs)

Benefits:

• Company paid Health Insurance Premiums!
• Insurance is effective your first day of employment
• Retirement Security Pension plan!
• Automatic 7% Company paid contribution to 401k with additional matching!
• Annual Bonus Program!
• Tuition and Certification reimbursement!
• Learn more HERE

To learn more about Cobb EMC visit our website at www.cobbemc.com

Responsibilities

What you will be doing:

Internal Audit

• Conduct assigned internal audits in accordance with the Internal Audit Charter, IIA Global Standards and ISACA Code of Professional Ethics, and internal audit department procedures, including leading planning, risk assessments, fieldwork, and documentation of audit workpapers.
• Lead execution of IT audits including coordination with external IT audit service providers and support internal audit staff with IT system and control tests as assigned.
• Perform internal IT control assessments, evaluate control effectiveness, and design control tests.
• Maintain effective working relationships with technology, operational, compliance, and business leaders across Cobb EMC and Gas South to support audit planning, fieldwork, remediation monitoring, continuous monitoring, and IT control activities. Write audit findings which consider criteria, condition, cause, and effect, and result in actionable recommendations to management to address the findings.
• Verbally present audit findings to auditee in a positive and constructive manner.
• Write draft audit reports which clearly summarize findings and recommendations.
• Monitor the status of audit recommendations to assess if they are implemented by management in a timely manner.
• Use corporate systems and business intelligence tools to maintain and improve the continuous auditing programs.
• Support supervisor in driving continuous improvement and modernizing the internal audit function by leveraging technology, including creating dashboards, building audit analytics, automating routine testing, and identifying opportunities to use data-driven tools that improve audit efficiency and accuracy.
• Assist in the IT risk assessment process and support development of the internal audit plan.
• Assist with execution of a quality assurance and improvement program for the internal audit function.
• Occasionally attend meetings with senior management and/or Audit Committee of the Board of Directors to discuss internal audit activities and results.
• Support supervisor in conducting periodic training or education to foster risk and controls awareness.
• As assigned, represent internal audit department in an advisory fashion on corporate project teams.
• Keep informed of internal audit, cybersecurity, data privacy, and IT-related best practices, and develop a strong understanding of Cobb EMC and Gas South business processes and systems.
• Assist with other internal audits, compliance, monitoring, and risk management activities as assigned, including operational audits based on department priorities and IT audit workload.

Compliance

• Identify potential areas of compliance risk.
• Identify areas of potential coordination for internal audits and compliance assurance activities.
• Assist with compliance assurance and monitoring activities as assigned.
• Support supervisor in training or education programs for employees on compliance obligations.
• Keep informed of applicable laws and regulatory changes affecting Cobb EMC and subsidiaries.

Qualifications

Minimum Requirements:

Bachelor’s Degree in Business Administration, Information Technology, Computer Science, or related field.

Minimum of five years of experience in computer information systems, IT operations, network administration, IT support or related IT functions, and two years of experience in internal audit, IT audit, cybersecurity or related control assessment work.

Knowledge of firewalls, VPNs, IDS/IPS, data loss prevention, endpoint security, cloud environments, databases, and security audits.

Experience with IT audit methodologies and frameworks such as ISO, COBIT, NIST, and NERC-CIP.

Certified Information System Auditor (CISA) or ability to obtain within an established period after hire.

Internal Audit Practitioner designation in progress to obtain within one year of hire, if not a Certified Internal Auditor.

SKILLS:

Proficient in Microsoft Office Suite, including Excel, Word, Power BI, Planner, and PowerPoint.

Proficient in IT control processes, security, systems, networks, databases, cloud environments, and operational technology.

Excellent analytical skills; ability to study trends in the operation of a utility and recommend improvements.

Effective interpersonal, conflict management, organizing, and planning skills.

Proficient at researching and synthesizing information, including staying abreast of current internal audit, IT audit, cybersecurity, data privacy, and regulatory best practices.

Effective project management skills: ability to prioritize effectively, multi-task and meet competing deadlines.

Effective oral and written communication skills.

Proficient working independently with limited direction and guidance.

Ability to appropriately handle confidential information.

Possess a valid Georgia driver’s license.

PREFERRED:

Previous electric and/or gas utility industry and/or cooperative experience.

Familiarity with the Institute of Internal Auditors Global Standards.

Experience with scripting or automation.

Experience creating audit programs, performing audit testing, and writing reports.

Experience researching, reading and applying corporate and regulatory standards.

Familiarity with cybersecurity risks and mitigation.

Hands-on IT experience is a plus.

Obtained Certified Internal Auditor (CIA) designation or Certified Information Systems Security Professional (CISSP).

CORE Values:

Put People First

Care, listen and connect. Think team, not self. Respect and value differences.

Stay Safe

No shortcuts. See the big picture, no tunnel vision. Look out for each other

Innovate

Embrace change. Think big and bold. Be part of the solution.

Own It

Own your attitude, actions and words. Find a way. No BCD. Never stop learning.

EOE/Disability/Vets/Drug-Free Workplace