Technology & Security Risk Auditor

Cincinnati, OH

Full-time

Hybrid

Entry Level

Global Payments is a payments technology company providing payment technology and software solutions. The Technology & Security Risk Auditor supports risk-based information technology and information security audits, including controls testing, audit lifecycle activities, data analysis, documentation, reporting, and remediation validation. The role evaluates technology risks and controls across on-premise and cloud environments and helps strengthen business processes and internal controls.

Apply Now

Responsibilities

Support controls testing for risk-based audits and supports the project team with all aspects of the audit lifecycle, including risk assessment, planning, client coordination, fieldwork, data analysis, work paper documentation, reporting, and remediation validation, with direction from senior team members
Willingness to learn and grow technical knowledge through team collaboration. Projects will include a strong focus on information technology and information security controls in executing integrated, risk-based audits to evaluate the design and effectiveness of internal controls. The auditor will also focus on the integration of IT and business process risk considerations within the audit process
Familiarity and understanding of technology control application in on-premise environments vs. increased automation of controls within cloud service provider (CSP) environments
Understanding of IT-managed processes, including technology architecture, system build, and provisioning, configuration management, performance monitoring, incident management, change management, user access management, disaster recovery, etc
Evaluate key information security risks including confidentiality, integrity, and availability of technology components through a review of security operational processes, such as vulnerability management, penetration testing, security logging and monitoring, security incident response, and defense-in-depth strategies
Evaluate root cause factors for audit testing exceptions and recommend practical solutions that reduce risk and strengthen business processes and controls
Ensure audit testing work papers are documented in a consistent and high-quality manner while executing project tasks in adherence to established timelines
Build and develop Internal Audit’s brand within the company through meaningful relationship building
Enable continuous improvement of the Internal Audit department by identifying and communicating enhancement opportunities to department leadership
Support the development of other team members within the Internal Audit department

Qualification

Required

The candidate should have experience with a wide array of technology processes, such as infrastructure design and management, information security operations, service management, software development lifecycle, disaster recovery planning, etc
* ### 1+ years of relevant audit and/or risk management experience
* ### Knowledge of auditing principles and practices, and the analysis and reporting of audit information
* ### Bachelor's degree in Auditing, Business Management, or Information Technology
* ### Familiarity with internal control frameworks, including COBIT, FFIEC, PCI DSS, Sarbanes-Oxley, ISO27001, and ITIL
* ### Open to 10-15% travel requirement, including some potential international travel
* ### Ability to work in a complex and evolving environment
* ### Demonstrate strong project management and execution skills, including: prioritizing tasks, balancing workload, anticipating next steps, and adapting to change
* ### Tailor project approaches based on areas of key risks. Critically evaluate audit procedures to maximize the value of each audit project
* ### Strong communication and presentation skills with an ability to tailor communications to different audiences
* ### Pursue work with enthusiasm, energy, drive, and team collaboration
* ### Establish and build effective relationships
* ### Collaborate with management and senior leadership to improve internal controls and processes
* ### Demonstrates ability to consider all team member's input before decision-making
* ### Proactively communicate issues with colleagues and obtain agreement on audit findings and practical recommendations with control owners before presentation to management
### Applicant must be authorized to work in the U.S. without the need for employment-based visa sponsorship now or in the future**; We will not sponsor applicants for U.S. work visa status for this opportunity (no sponsorship is available for H-1B, L-1, TN, O-1, E-3, H-1B1, F-1, J-1, OPT, CPT or any other employment-based visa)

Preferred

### Familiarity with the payment processing industry and common technology control frameworks, including COBIT, NIST Cybersecurity, ISO 27000 series, PCI-DSS, and FFIEC IT Handbook is also preferred
* ### Merchant Acquiring / Payment Processing, Card Issuance, and Private-label Consumer Solutions industry experience preferred
* ### CIA, CISA, CISM, CISSP, or other relevant certifications are preferred
* ### Professional services audit or risk advisory experience preferred

Benefits

Hybrid work arrangement
Future career advancement opportunities
Exposure to senior leadership and organizational divisions across the globe
Opportunities to learn from experienced industry professionals and grow your career

Global Payments (NYSE: GPN) is a leading payment technology and software company that powers commerce for businesses of all sizes worldwide.

Glassdoor