Information Systems Auditor Philip Morris 04 sep

The Senior IS Auditor position is an exciting and challenging opportunity for a dynamic audit professional responsible for conducting IS risk-based audits for Philip Morris Mexico and LA&C region's affiliates, by examining and verifying Information System processes and procedures to determine the reliability and effectiveness of the existing control systems. In addition, will support the Internal Controls Manager and PMI LA&C affiliates in a consulting role by evaluating and recommending information security best practices in IT infrastructure (operating systems, network applications, database and Web security) & IT General Controls.

 TECHNICAL SKILLS:

 •  Requires Bachelor degree in a technical discipline, Information Systems, Computer Science preferred. 

•  At least 4 years of progressive experience in IT/IS Audit with a Big 4 or Internal Audit department (consumer goods background is favorable, but not necessary).

 • The candidate should have hands-on experience in IT SOX review, Risk Assessment and Mitigation, IS methodologies & Best Practices, Security reviews (application, database, operating systems, network), Change Management, IT Operations, Development & Implementation, Project Management methodology, IT infrastructure. As well as business continuity planning, disaster recovery and physical/logical access security. 

 • SAP: Security, Authorizations, Business Process Analysis,& Segregation of Duties

• Operating systems and Network Security (Windows/Firewalls).

• Internet/Intranet Applications Security

• Privacy technologies (encryption/signatures)

• Database Management

• Information security (Windows, Active Directory, ORACLE, SQL, TCP/IP)

• Ability to evaluate complex information systems and controls, including payroll, sales management, quality assurance, e-banking, among other.

• Develop/adapt risk-based audit plans and audit programs for audit areas assigned by identifying key internal controls, processes and risks to determine the nature, extent, and timing of audit procedures to be performed.

• Demonstrate thorough understanding of IS auditing standards (ISACA), COBIT control framework and be able to apply such understanding to any work performed.

• Assist in developing and preparing yearly corporate risk assessments, audit plans and compliance plans.

• ACL and SAP Extraction Software. Knowledge of how to use ACL and SAP
computer software packages in order to extract necessary data to
perform data analyses.

• CISA will be considered a plus, however not required.

PMI COMPETENCY MODEL RELATED SKILLS:

Communication and Influence

• Strong English written and verbal communication skills.

• Clearly, accurately, and succinctly summarizes the results of analysis to effectively present and communicates complex technological issues in a clear and concise manner to technical and non technical audience.

• Require a comfort level in communicating with high-level company officers.

• Professional Skepticism. Ability and inclination to tactfully yet forcefully pursue understanding and verification to the point of reasonable assurance.

Analytical and Learning Capability

• Collect and analyze complex data and drawing logical conclusions (problem solving).

• Ability to define issues, collect data, establish facts, and draw valid conclusions.

• Continuously analyze business risk profiles and provide assurance that appropriate risk mitigation is taken.

Creative Thinking

• Proactively identify potential risks to company objectives.

&b