Zebra Technologies
Information Security Auditor, Senior
Zebra Technologies, Lincolnshire, Illinois, United States, 60069
Remote Work: Hybrid
Overview:
At Zebra, we are a community of innovators who come together to create new ways of working to make everyday life better. United by curiosity and care, we develop dynamic solutions that anticipate our customer’s and partner’s needs and solve their challenges. Being a part of Zebra Nation means being seen, heard, valued, and respected. Drawing from our diverse perspectives, we collaborate to deliver on our purpose. Here you are a part of a team pushing boundaries to redefine the work of tomorrow for organizations, their employees, and those they serve. You have opportunities to learn and lead at a forward-thinking company, defining your path to a fulfilling career while channeling your skills toward causes that you care about – locally and globally. We’ve only begun reimaging the future – for our people, our customers, and the world. Let’s create tomorrow together.The Senior Information Security Auditor leads in the execution of Information Technology (IT) audits, including those audits facilitated over the IT organization and the IT aspects of the company’s financial, operational, and compliance audit projects. Reporting to the Director, Information Security, the Senior Information Technology Auditor may provide guidance to other parts of the organization.
Responsibilities:Responsible for planning, leading, and executing IT audit projects and the IT portion of integrated audits (other financial, operational, and compliance projects with an IT sub-focus):
Performs upfront Internal Audit project planning, including the definition of audit scope and audit work programsLeads interviews to understand the business process and application flow and documents the business process in a set of flowcharts or narrativesEvaluates the effectiveness of the design of controls for business processes and executes testing of internal controls, identifying exceptionsIncorporates the use of data analytics where appropriate to improve the audit efficiency and broaden the audited populationSummarizes the audit results in a set of audit workpapers and an audit report and presents results to management
Ensures that Zebra IA methodology is adhered and that workpapers are compliant with the Institute of Internal Auditors' Professional Standards for Internal AuditingLeads or assists in the execution of SOX compliance pre-auditing of the IT General Controls (ITGCs), including the evaluation of the design of these SOX controls, the completion of ITGC SOX walkthroughs, and testing the effectiveness of ITGC SOX controls.Assists with efforts to evaluate system access and segregation of duties and evaluates the company’s cyber security strategies and processes.Participates as an independent resource on new systems development and implementation projects to ensure controls are properly designed and in place.May provide other team members, as relevant, with appropriate guidance during the course of project work.Ensures that Management and the audited party are kept up to date with audit status and the potential audit findings during the course of fieldwork.Takes the lead role on complex projects and works under guidance of a Manager or Director on some projects classified as having very high complexity.Over time, begins to take on responsibilities at the next level.Provides constructive feedback and concrete action steps to continually improve performance.Builds a good rapport and solid business relationships with the Zebra Management Team.Manage department key performance metrics and actively engage in the continuous improvement of the Internal Audit departmentCreate reports that highlight areas where process or technology (i.e. IT infrastructure) may be improvedRecommend changes to controls, processes, and procedures to ensure data integrity and security and improve operational efficiency and appropriate suggestions to achieve the improvementsPrepare appropriate documentation (e.g. narratives, flowchart, control matrices, segregation of duties analyses, application controls, audit reports, etc.) in support of all assurance and consulting work performed.
Qualifications:Minimum Qualifications:Bachelor's degree in Accounting Information Systems, Management Information Systems, Computer Science, Accounting, or other related Business degree3+ years of experience with a leading public accounting / consulting firm (focused on IT audit, including at least 1 year of ERP controls auditing, consulting and/or implementing)Command over risk and internal controls specific to information technology, including, but not limited to those risks and controls specific to system implementation / change managementCompleting tests around financial system controls compliance, IT General Computer Controls (ITGC), and Application ControlsConduct information security compliance to policy audits (e.g. ISO2700X, NIST, etc.) to evaluate risk, compliance, and control effectiveness, focusing on long-term strategies for a public companyThorough understanding of audit methodologies and processes (e.g., COSO, COBIT)Preferred Qualifications:General knowledge of ISO 27000 and / or NIST is a plus.Experience auditing major ERP systems; Knowledge specific to Oracle ERP is a strong plus.
Demonstrates some understanding of ERP core financial modules, projects, some industry-specific modules and/or bolt-on products, and GRC technology.Demonstrates some knowledge of security and control (including configuration) for ERP applications and/or technologies.Demonstrates some knowledge of the design, implementation, and/or assessment of controls, including an understanding of the systems implementation lifecycle, as well as configuring and optimizing business process controls and application security.Demonstrates some understanding of business processes related to core ERP modules, including knowledge of industry-specific modules/products and/or direct experience configuring and implementing an ERP.
Experience with auditing cyber-security and / or product security (IT security for technology products) is a plus.General knowledge of IIA Standards is a plus.Proficiency in PC-based computer systems, including Microsoft Office programs and Visio. Knowledge of audit software such as Teammate AM and ACL is a plus.
In addition to the core knowledge and skills noted above, the Senior IT Auditor should have the following areas of knowledge and / or skill:Basic understanding of core business processesProficiency in auditing for potential fraudProficiency in data analytics procedures / techniquesAbility to evaluate risk impact and vulnerabilityAbility to navigate through moderate levels of ambiguity and drive value-added recommendationsSolid communication skills with a sense of presence with the management team
Travel Requirements: Travel is estimated at 10-15%, potentially including international travel.Zebra is an equal opportunity/affirmative action employer committed to a diverse and inclusive workplace. All qualified candidates will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability and protected veteran status or any other basis prohibited by law. If you are an individual with a disability and need assistance in applying for a position, please contact us at workplace.accommodations@zebra.com. We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform crucial job functions, and to receive other benefits and privileges of employment.Know Your Rights:https://www.eeoc.gov/sites/default/files/2022-10/EEOC_KnowYourRights_screen_reader_10_20.pdfConozca sus Derechos:https://www.eeoc.gov/sites/default/files/2022-10/22-088_EEOC_KnowYourRightsSp_10_20.pdfWe will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform crucial job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.Zebra is a federal contractor and is committed to an alcohol and drug free workplace. As a result, all U.S. based employees are subject to the Drug and Alcohol Free Workplace Policy and Procedure.
Salary:
USD 82500.00 - USD 123700.00 Yearly
Salary offered will vary depending on your location, job-related skills, knowledge, and experience. Additionally, all Zebra roles are eligible for cash incentive programs. For example, sales roles have additional opportunity to earn substantial variable compensation tied to quota achievement. In most other roles, the Zebra annual cash incentive program links Company and individual performance together. Some roles may also be eligible for long-term incentive equity awards.
To protect candidates from falling victim to online fraudulent activity involving fake job postings and employment offers, please be aware our recruiters will always connect with you via
@zebra.com
email accounts. Applications are only accepted through our applicant tracking system and only accept personal identifying information through that system. Our Talent Acquisition team will not ask for you to provide personal identifying information via e-mail or outside of the system. If you are a victim of identity theft contact your local police department.#J-18808-Ljbffr
Overview:
At Zebra, we are a community of innovators who come together to create new ways of working to make everyday life better. United by curiosity and care, we develop dynamic solutions that anticipate our customer’s and partner’s needs and solve their challenges. Being a part of Zebra Nation means being seen, heard, valued, and respected. Drawing from our diverse perspectives, we collaborate to deliver on our purpose. Here you are a part of a team pushing boundaries to redefine the work of tomorrow for organizations, their employees, and those they serve. You have opportunities to learn and lead at a forward-thinking company, defining your path to a fulfilling career while channeling your skills toward causes that you care about – locally and globally. We’ve only begun reimaging the future – for our people, our customers, and the world. Let’s create tomorrow together.The Senior Information Security Auditor leads in the execution of Information Technology (IT) audits, including those audits facilitated over the IT organization and the IT aspects of the company’s financial, operational, and compliance audit projects. Reporting to the Director, Information Security, the Senior Information Technology Auditor may provide guidance to other parts of the organization.
Responsibilities:Responsible for planning, leading, and executing IT audit projects and the IT portion of integrated audits (other financial, operational, and compliance projects with an IT sub-focus):
Performs upfront Internal Audit project planning, including the definition of audit scope and audit work programsLeads interviews to understand the business process and application flow and documents the business process in a set of flowcharts or narrativesEvaluates the effectiveness of the design of controls for business processes and executes testing of internal controls, identifying exceptionsIncorporates the use of data analytics where appropriate to improve the audit efficiency and broaden the audited populationSummarizes the audit results in a set of audit workpapers and an audit report and presents results to management
Ensures that Zebra IA methodology is adhered and that workpapers are compliant with the Institute of Internal Auditors' Professional Standards for Internal AuditingLeads or assists in the execution of SOX compliance pre-auditing of the IT General Controls (ITGCs), including the evaluation of the design of these SOX controls, the completion of ITGC SOX walkthroughs, and testing the effectiveness of ITGC SOX controls.Assists with efforts to evaluate system access and segregation of duties and evaluates the company’s cyber security strategies and processes.Participates as an independent resource on new systems development and implementation projects to ensure controls are properly designed and in place.May provide other team members, as relevant, with appropriate guidance during the course of project work.Ensures that Management and the audited party are kept up to date with audit status and the potential audit findings during the course of fieldwork.Takes the lead role on complex projects and works under guidance of a Manager or Director on some projects classified as having very high complexity.Over time, begins to take on responsibilities at the next level.Provides constructive feedback and concrete action steps to continually improve performance.Builds a good rapport and solid business relationships with the Zebra Management Team.Manage department key performance metrics and actively engage in the continuous improvement of the Internal Audit departmentCreate reports that highlight areas where process or technology (i.e. IT infrastructure) may be improvedRecommend changes to controls, processes, and procedures to ensure data integrity and security and improve operational efficiency and appropriate suggestions to achieve the improvementsPrepare appropriate documentation (e.g. narratives, flowchart, control matrices, segregation of duties analyses, application controls, audit reports, etc.) in support of all assurance and consulting work performed.
Qualifications:Minimum Qualifications:Bachelor's degree in Accounting Information Systems, Management Information Systems, Computer Science, Accounting, or other related Business degree3+ years of experience with a leading public accounting / consulting firm (focused on IT audit, including at least 1 year of ERP controls auditing, consulting and/or implementing)Command over risk and internal controls specific to information technology, including, but not limited to those risks and controls specific to system implementation / change managementCompleting tests around financial system controls compliance, IT General Computer Controls (ITGC), and Application ControlsConduct information security compliance to policy audits (e.g. ISO2700X, NIST, etc.) to evaluate risk, compliance, and control effectiveness, focusing on long-term strategies for a public companyThorough understanding of audit methodologies and processes (e.g., COSO, COBIT)Preferred Qualifications:General knowledge of ISO 27000 and / or NIST is a plus.Experience auditing major ERP systems; Knowledge specific to Oracle ERP is a strong plus.
Demonstrates some understanding of ERP core financial modules, projects, some industry-specific modules and/or bolt-on products, and GRC technology.Demonstrates some knowledge of security and control (including configuration) for ERP applications and/or technologies.Demonstrates some knowledge of the design, implementation, and/or assessment of controls, including an understanding of the systems implementation lifecycle, as well as configuring and optimizing business process controls and application security.Demonstrates some understanding of business processes related to core ERP modules, including knowledge of industry-specific modules/products and/or direct experience configuring and implementing an ERP.
Experience with auditing cyber-security and / or product security (IT security for technology products) is a plus.General knowledge of IIA Standards is a plus.Proficiency in PC-based computer systems, including Microsoft Office programs and Visio. Knowledge of audit software such as Teammate AM and ACL is a plus.
In addition to the core knowledge and skills noted above, the Senior IT Auditor should have the following areas of knowledge and / or skill:Basic understanding of core business processesProficiency in auditing for potential fraudProficiency in data analytics procedures / techniquesAbility to evaluate risk impact and vulnerabilityAbility to navigate through moderate levels of ambiguity and drive value-added recommendationsSolid communication skills with a sense of presence with the management team
Travel Requirements: Travel is estimated at 10-15%, potentially including international travel.Zebra is an equal opportunity/affirmative action employer committed to a diverse and inclusive workplace. All qualified candidates will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability and protected veteran status or any other basis prohibited by law. If you are an individual with a disability and need assistance in applying for a position, please contact us at workplace.accommodations@zebra.com. We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform crucial job functions, and to receive other benefits and privileges of employment.Know Your Rights:https://www.eeoc.gov/sites/default/files/2022-10/EEOC_KnowYourRights_screen_reader_10_20.pdfConozca sus Derechos:https://www.eeoc.gov/sites/default/files/2022-10/22-088_EEOC_KnowYourRightsSp_10_20.pdfWe will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform crucial job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.Zebra is a federal contractor and is committed to an alcohol and drug free workplace. As a result, all U.S. based employees are subject to the Drug and Alcohol Free Workplace Policy and Procedure.
Salary:
USD 82500.00 - USD 123700.00 Yearly
Salary offered will vary depending on your location, job-related skills, knowledge, and experience. Additionally, all Zebra roles are eligible for cash incentive programs. For example, sales roles have additional opportunity to earn substantial variable compensation tied to quota achievement. In most other roles, the Zebra annual cash incentive program links Company and individual performance together. Some roles may also be eligible for long-term incentive equity awards.
To protect candidates from falling victim to online fraudulent activity involving fake job postings and employment offers, please be aware our recruiters will always connect with you via
@zebra.com
email accounts. Applications are only accepted through our applicant tracking system and only accept personal identifying information through that system. Our Talent Acquisition team will not ask for you to provide personal identifying information via e-mail or outside of the system. If you are a victim of identity theft contact your local police department.#J-18808-Ljbffr