Job Details
Description
OVERVIEW: As part of Marine Max’s Internal Audit Department, the IT Audit Manager will work as a trusted, independent advisor with management, and will know how to apply risk and control concepts to scenarios encountered, while identifying potential technology-related issues. The IT Auditor Manager is also responsible for performing and completing IT-focused internal audits, including management of the IT general controls of MarineMax’s SOX compliance program, as part of the internal audit plan. This responsibility includes performing internal audit procedures and assisting in the preparation of internal audit reports reflecting the results of the work performed.
KEY TASKS:
- Develop an understanding and knowledge of the industry and MarineMax to help identify technology-related risks to the organization.
- Provide input and assist the VP of Internal Audit with IT risk assessments and the annual internal audit plan.
- Apply Internal Audit standards (IPPF) and techniques to all audit projects.
- Assist with the evaluation of the design and operating effectiveness of MarineMax’s control environment, in accordance with standards such as COSO, COBIT, NIST as well as Sarbanes-Oxley requirements.
- Execute day-to-day internal audit activities in the performance and management of IT engagements, Sarbanes-Oxley compliance GITC testing activities, and special projects.
- Perform risk-based IT projects with a focus on the adequacy and effectiveness of MarineMax’s financial systems, internal control, operational effectiveness, adherence to policies and procedures, and regulatory compliance.
- Clearly communicate IT audit results to management and oversee the development and completion of corrective action plans to ensure identified risks are addressed.
- Audit and design test procedures for IT controls across a range of areas/technologies (including but not limited to: IT General Controls, application controls, system implementations, cybersecurity, privacy, database management systems, operating systems, ERPs).
- Research and recommend process, security, technology, operations, and compliance enhancements.
- Provide support on the use of data analytics in audit methodology and execution.
- Assist in the performance of management ad-hoc requests and/or special projects as needed.
- Develop positive working relationships throughout the organization.
- Perform other duties as assigned by the VP of Internal Audit or Senior Manager – Internal Audit
- Maintain the highest integrity and confidentiality as it relates to all internal audit related projects.
QUALIFICATIONS, KNOWLEDGE, AND SKILLS:
- Bachelor’s degree in Management Information Systems, Information Technology, or related field required
- Certifications such as CISA, CISM, CISSP, CIA, GSNA, etc. preferred
- 3 - 5 years of experience in an IT audit role
- Ability to travel up to 15% of the time is required
- Knowledge and proficiency in using PowerShell to perform audit work preferred
- Proficient understanding of internal auditing, generally accepted audit standards, information technology principles and practices, audit/accounting terminology and concepts
- Proficient knowledge of Sarbanes-Oxley legislation and associated compliance requirements.
- Proficient knowledge of the Standards for the Professional Practice of Internal Auditing and the Code of Ethics developed by the Institute of Internal Auditors
- Proficient knowledge of COBIT, NIST, ISO 27001, and/or related frameworks
- Requires experience interacting with department heads and the ability to work without supervision on specific assignments.
- Requires excellent oral, written, and interpersonal communication skills
- MarineMax and its subsidiaries uses E-Verify, an Internet-based system, to confirm the eligibility of all newly hired employees to work in the United States. Learn more about E-Verify, including your rights and responsibilities.
