Berkshire Hathaway Energy
IT Auditor/Sr IT Auditor
Berkshire Hathaway Energy, Des Moines, Iowa, United States, 50319
Job Description
This is a multi-level posting. Candidates may be considered for any of the posted levels, depending on their level of experience and depth of expertise.
The IT auditor assists management in meeting their objectives by providing value added consulting services focused on controls and efficiency of BHE information systems and information technology operating processes and procedures.
Responsibilities
Plan and perform information technology (IT) related audit projects to evaluate the effectiveness of risk management, internal control and governance processes. Includes reviews of operational compliance, regulatory compliance, best practices, security, access controls, change controls and operations. (40%) Document the results of audit testing in support of audit conclusions and in accordance with documentation standards. (20%) Interacts with employees and management at all levels. (15%) Effectively communicate and report audit status and results in an accurate and concise manner and work with management to develop action plans for recommendations. (10%) Effectively utilizes time to complete assignments within budget. (5%) Ensure action plans addressing audit findings are completed. (5%) Utilize software skills to retrieve, analyze and report audit information. (5%) Perform additional responsibilities as requested or assigned.
Qualifications
Bachelor's degree in computer science, information systems, engineering, accounting, finance or related field. Five or more years of related experience including three or more years of IT auditing or IT security experience. Demonstrated knowledge of IT general controls, business application controls, and security of corporate and operational controls networks. Professional certification as a certified information systems auditor (CISA) or certified information systems security professional (CISSP) preferred. Influencing skills to persuade, direct and lead opinion. Analytical, problem-solving and decision-making skills needed to recognize patterns in data, information or events and to draw logical conclusions and to make recommendations for action. Auditing skills to understand principles of internal control. Understanding and knowledge of COBIT framework, COSO framework, ISO 27001 and similar information security standards, and Sarbanes-Oxley Act requirements. Familiarity with UNIX, Linux, Windows Server, Active Directory, Oracle and MS SQL. Familiarity with data analytics, artificial intelligence and robotic process automation. Software skills to develop spreadsheets to analyze audit information and to retrieve audit information from the appropriate software systems. Communication skills to transmit information accurately and understandably in both written and oral formats. Short-term/project management planning skills to plan work flow, coordinate projects and resolve conflicting demands. Ability to prioritize and handle multiple tasks and projects concurrently. Ability to travel locally and nationally up to 15% of the time; valid driver's license. Employees must be able to perform the essential functions of the position, with or without an accommodation. We celebrate diversity, equity and inclusion, and we are proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion or religious creed, age, national origin, ancestry, citizenship status (except as required by law), gender (including gender identity and expression), sex (including pregnancy), sexual orientation, genetic information, physical or mental disability, veteran or military status, familial or parental status, marital status or any other category protected by applicable local, state or U.S. federal law.
About Us
MidAmerican Energy Company, a Midwest utility, provides regulated electric and natural gas service to more than 1.6 million customers in Illinois, Iowa, Nebraska and South Dakota. The company owns and operates a portfolio of power-generating assets, approximately 61% of which is wind generation.
This is a multi-level posting. Candidates may be considered for any of the posted levels, depending on their level of experience and depth of expertise.
The IT auditor assists management in meeting their objectives by providing value added consulting services focused on controls and efficiency of BHE information systems and information technology operating processes and procedures.
Responsibilities
Plan and perform information technology (IT) related audit projects to evaluate the effectiveness of risk management, internal control and governance processes. Includes reviews of operational compliance, regulatory compliance, best practices, security, access controls, change controls and operations. (40%) Document the results of audit testing in support of audit conclusions and in accordance with documentation standards. (20%) Interacts with employees and management at all levels. (15%) Effectively communicate and report audit status and results in an accurate and concise manner and work with management to develop action plans for recommendations. (10%) Effectively utilizes time to complete assignments within budget. (5%) Ensure action plans addressing audit findings are completed. (5%) Utilize software skills to retrieve, analyze and report audit information. (5%) Perform additional responsibilities as requested or assigned.
Qualifications
Bachelor's degree in computer science, information systems, engineering, accounting, finance or related field. Five or more years of related experience including three or more years of IT auditing or IT security experience. Demonstrated knowledge of IT general controls, business application controls, and security of corporate and operational controls networks. Professional certification as a certified information systems auditor (CISA) or certified information systems security professional (CISSP) preferred. Influencing skills to persuade, direct and lead opinion. Analytical, problem-solving and decision-making skills needed to recognize patterns in data, information or events and to draw logical conclusions and to make recommendations for action. Auditing skills to understand principles of internal control. Understanding and knowledge of COBIT framework, COSO framework, ISO 27001 and similar information security standards, and Sarbanes-Oxley Act requirements. Familiarity with UNIX, Linux, Windows Server, Active Directory, Oracle and MS SQL. Familiarity with data analytics, artificial intelligence and robotic process automation. Software skills to develop spreadsheets to analyze audit information and to retrieve audit information from the appropriate software systems. Communication skills to transmit information accurately and understandably in both written and oral formats. Short-term/project management planning skills to plan work flow, coordinate projects and resolve conflicting demands. Ability to prioritize and handle multiple tasks and projects concurrently. Ability to travel locally and nationally up to 15% of the time; valid driver's license. Employees must be able to perform the essential functions of the position, with or without an accommodation. We celebrate diversity, equity and inclusion, and we are proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion or religious creed, age, national origin, ancestry, citizenship status (except as required by law), gender (including gender identity and expression), sex (including pregnancy), sexual orientation, genetic information, physical or mental disability, veteran or military status, familial or parental status, marital status or any other category protected by applicable local, state or U.S. federal law.
About Us
MidAmerican Energy Company, a Midwest utility, provides regulated electric and natural gas service to more than 1.6 million customers in Illinois, Iowa, Nebraska and South Dakota. The company owns and operates a portfolio of power-generating assets, approximately 61% of which is wind generation.