IT Auditor

The Safeco IT Audit department provides assurance that internal controls in Safeco's business processing systems, technical infrastructure, and IT organization are effective and efficient. Safeco operates a complex IT environment that includes multi-tiered mainframe, distributed, and network infrastructure technology. The IT Auditor identifies risks, assesses controls, and recommends internal control improvements across a wide variety of IT processes and technology. Internal Audit uses an integrated approach and IT auditors are expected to support business process audits as well as completing technical audits.Key responsibilities of this role are:
PERFORM AUDITS
Plan IT audit work by identifying and assessing risks and exposures in systems and IT processes. Determine audit approach and develop audit program and questionnaires to identify and test controls using the CobiT framework. Identify client personal to perform risk analysis.
Identify and assess the adequacy of IT controls. Develop appropriate test steps to evaluate the effectiveness of key controls.
Test controls by reviewing compliance and performing substantive testing using Computer Assisted Audit Techniques (CAAT's). Identify control issues and work with the client to develop clear and actionable management action plans for improving controls.
Support conclusions by documenting work according to department standards. Effectively communicate control issues, business impact, and recommendations during weekly client update meetings. Clearly and concisely document control issues in the departments audit advisory document.
Prepare audit reports for senior management that clearly and concisely communicate control issues, business impact, and management action plans. Apply judgment determining a report rating.


ADVISE CLIENTS
Perform follow-up and close-out of management action plans.
Establish and maintain a working relationship with IT by participating in the department's liaison program.
Support Safeco IT by providing advice and control requirements on system development projects. Perform special projects as defined by the client and audit management.The key requirements are:
IMPORTANT KNOWLEDGE
Advanced audit and internal control concepts and techniques.
Thorough ability to identify business and IT processes, risks, and controls.
Understanding of how IT organizations function, IT roles and responsibilities – including SDLC, operations, and IT governance.
Knowledge of data security concepts.
Very good knowledge of PC software applications and CAATs (Computer Assisted Audit Techniques) including ACL.
Demonstrated understanding of CobiTCANDIDATE PROFILE
Candidates would have likely developed the needed skills and competencies through some of the following background and experiences:
Solid academic training - Undergraduate degree in either Information Systems, Accounting, Finance, or a combination of these.
Professional certification (CISA, CISSP, CPA, CIA) preferred.
Minimum of 2-4 years experience auditing IT.

Prefer experience in audit and control of the following:
Distributed systems, Windows, IBM Mainframe, and network services
A quick learner who has a passion for increasing their knowledge of current and emerging IT. An individual committed to self-development.
Establishes and maintains effective relationships with management and internal clients.
Excellent analytical abilities - uses honest analysis to understand issues, develop solutions, and make decisions. Accurately assesses IT risk significance.
Effective communicator
Comfortable setting priorities and able to focus on being effective.
Able to train others in IT audit concepts and techniques.
Relational Databases – DB2, SQL Server
REQUIREMENTS
Please refer to the Job Description for the qualifications.