Associate Director, IT Internal Audit

The IT Internal Audit Associate Director is responsible for assessing the adequacy of Global Information Technology security and controls.  A primary objective of the IT Audit team is to ensure compliance with Sarbanes-Oxley requirements through rigorous review testing and recommendation of improvements to IT general controls, safeguarding organizational assets and promoting operational efficiency.  This position supports and assists the Internal Audit Director and will perform the annual risk assessment and develop the IT audit plan, as well as strategic department transformation initiatives, including data analytics and the audit GRC technology.  The IT audit team consists of an associate director, a manager, four auditors and a data analyst.

Key Responsibilities

• Develop the audit schedule and plan the allocation of IT audit resources based on audit scope and risk.  Identify opportunities to integrate IT audit with financial and risk audits and help increase audit efficiency and effectiveness.
• Demonstrate and apply technical skills to understand and evaluate the risk landscape surrounding a complex information systems environment. 
• Develop a working knowledge and understanding of the company.  Partner and collaborate with IT leaders and other assurance teams to plan and execute engagements effectively.
• Support the audit team to ensure project success.  Provide technical and practical guidance to IT audit team and control owners to identify and remediate IT related internal control gaps.
• Ensure timely completion of SOX audit projects and manage resources effectively to meet project deadlines.
• Where needed, conclude on issues where audit team and management disagree.  Review internal audit reports and presentations to ensure clear messaging and action items that are practical and cost-effective that address root causes. 
• Conduct or manage specialized risk projects, such as cybersecurity assessments, privacy strategies and/or architecture reviews.
• Lead definition of reporting and analytics strategies and plans for the Internal Audit Department, focusing on advanced data analytic techniques for audits, visualization tools for dashboarding and Audit GRC technology to improve workflow.
• Oversee and manage the audit GRC (Governance, Risk, and Compliance) software used by the audit team.
• Stay updated on latest technologies, regulatory changes, and industry trends to identify areas for improvement and enhance the effectiveness of the SOX audit program.
• Continually recruit, train, develop and place auditors into the global IT organization.

Qualifications

• 10+ years of IT audit or related experience with 3+ years of experience in a Top 10 Accounting firm.
• 5+ years of people leader experience.
• CISA, CIA, CISSP, CISM, CPA, or equivalent professional certification.
• Knowledge of IT frameworks, standards, and best practices, such as ISO 27001/2, COBIT, SOC2 reporting, ISO, NIST.
• Deep technical knowledge of a wide range of IT areas including software development and implementation, IT infrastructure, cloud technology, network operations, data centers and cyber security.
• Solid critical thinking and analytical skills with the ability to quickly assess IT processes and solve complex problems.
• Excellent communication, facilitation and interpersonal skills including ability to build relationships and interact effectively across the business.
• Bachelor’s or Master’s degree in Cybersecurity, Management Information Systems, Computer Science or Finance with proper technical focus and experience.
• Exposure or working knowledge of SAP S/4 HANA desired.

Benefits: health/dental/vision/life insurance, family leave, 401K, PTO and more! #LI-Hybrid

PPG pay ranges and benefits can vary by location which allows us to compensate employees competitively in different geographic markets. PPG considers several factors in making compensation decisions including, but not limited to, skill sets, experience and training, qualifications and education, licensure and certifications, and other organizational needs. Other incentives may apply. 
 
Our employee benefits programs are designed to support the health and well-being of our employees. Any insurance coverages and benefits will be in accordance with the terms and conditions of the applicable plans and associated governing plan documents.