IT Audit Manager

ESSENTIAL FUNCTIONS: 
1. Assist in the development of the annual audit plan based on the annual risk assessment that 
addresses the key areas of risk/opportunity within Information Technology. 
2. Execute and/or manage independent reviews and evaluations of any and all technology-related 
operations and activities to assess: 
 The reliability and integrity of internal controls over financial reporting for systems that 
authorise transactions and safeguard assets. 
 Compliance with policies, laws, and regulations which could have significant impact upon IT 
operations and processes. 
 The effectiveness and efficiency of IT operations. 
3. Report to RAAS Director - Technology on the following: 
 The scope/objectives and status of the assigned audits. 
 The adequacy of processes and internal controls and their related impact on the 
organization on a project by project basis. 
 The action taken by IT Management to mitigate control deficiencies or enhance the 
effectiveness or efficiencies of operations. 
 The implementation status of management action plans. 
4. Assist in the Sarbanes-Oxley 404 compliance program for IT by performing independent testing of 
the effectiveness of internal controls over systems and processes used in financial reporting and 
provide support to the ITGC SOX Coordinator as assigned by the RAAS Director. 
5. Adhere to the RAAS departmental procedures for audit planning, fieldwork and reporting. 
6. Develop an effective working relationship with IT senior management to ensure RAAS is viewed as a 
partner for managing IT risk. 
7. Coordinate and perform integrated technology audits with operating company RAAS groups.

POSITION SCOPE: 
 The position is responsible for the execution of Global technology reviews across our Brands and 
requires the ability to interface well with all levels of management.

QUALIFICATIONS: 
 Education: A degree in Computer Science, Management Information Systems and/or Accounting is 
required. A Master’s degree is a plus, MIS concentration is preferred. Professional certification, such as 
Certified Information Systems Auditor (CISA) or Certified Information Systems Security Professional 
(CISSP) is desired. Proficiency with a personal computer and computer assisted audit tools (like ACL) is 
required. 

Experience: Requires a minimum of 6 years’ experience auditing information systems in a “Big Four” 
firm and/or large, complex company environment. Prior experience in a managerial role, preferably in 
an internal audit department, is desired. 
 
Knowledge, Skills & Abilities: 
 Proven project management, analytical, and organization skills to enable the manager to work 
independently on multiple projects and meet deadlines while ensuring quality results is 
expected. 
 Knowledge of information systems security and controls for information technologies such as 
LAN, Client/Server, Mainframe, UNIX, Wintel, Oracle, SQL Server and networks is desirable. 
 Personal initiative and professional enthusiasm are important skills for success in a complex and 
challenging systems audit environment. 
 The success of the individual will also be determined by their ability to work as a team member, 
partnering with highly accomplished audit and IT professionals in performing audits.