Lead IT Auditor

As a Lead IT Auditor joining the Global Audit Department, you will have the opportunity to oversee a small team of IT Auditors and provide coaching and mentoring on a daily basis. In this role you will manage the execution and detail or general review of IT Audits, inclusive of ITGC's, application controls, system conversions, and other operational audits. As the Lead IT Auditor, you will be meeting with external auditors and key IT and business stakeholders on a daily basis to resolve issues and enhance business processes within the organization. Here at Sherwin-Williams, the Lead IT Auditor will also help ensure the team adheres to the highest degree of professional standards and strict confidentiality.

Because this role involves access to confidential financial information, the Company has determined that a review of criminal history is necessary to protect the business and its operations and reputation and to provide similar protections for its clients and potential investments.

CORE RESPONSIBILITIES AND TASKS

Execute annual Sarbanes-Oxley (SOX) compliance program

• Stay up to date on current guidance and methodologies and implement best practices to streamline approach to reduce costs and improve efficiencies

• Manage the completion of ITGC and business process walkthroughs including the preparation and review of supporting documentation to meet internal and external deadlines
• Work independently with IT and the business to understand application systems, business processes, resolve issues and communicate findings
• Detail or general review control procedures over key ITGC and financial business processes
• Coordinate and collaborate with external auditors and management to strategically resolve identified issues and lead efforts to ensure risk remediation and risk mitigation procedures are documented appropriately
• Understand SW's divisions and in-scope IT applications, including key data flows, in order to continuously identify opportunities for compliance improvement
• Consult with key process and control owners on ITGCs, application controls, and IPE considerations for key systems within the organization.

Execute internal audits over critical IT applications, ERP systems, and other IT focused areas (i.e. system conversions, cybersecurity, DB/OS)

• Lead efforts around the key components of system conversions to help drive the completion of SDLC assessments (i.e. data conversion, key control mapping, testing phases (i.e. SIT, FUT, UAT, etc.), security design requirements, etc.)
• Multi task key IT audit projects to completion, ensuring quality is maintained throughout the project
• Review work performed by Senior IT Auditors and IT Auditors and provide timely feedback
• Draft final reports to management
• Lead additional IT risk assessments and audit programs
• Understand key risks associated with the application, database, and operating system layers

Manage the execution of annual financial statement audit by partnering with external auditors

• Work with external auditors to communicate results and expectations
• Look for opportunities to streamline the process and better partner with external auditors

Responsible for training and developing IT Auditors

• Supervise daily work of approximately 2-3 IT Auditors
• Develop IT Auditors through coaching and mentoring
• Develop IT Auditors through effectively delegating IT audit tasks and providing guidance/learning opportunities
• Provide performance feedback, training and performance reviews
• Supervise, train, and mentor IT Auditors on audit processes and assess performance of auditors for bi-annual reviews
• Manage field work, inform supervisors of the IT audit engagement status and manage IT Auditors performance
• Foster an efficient, innovative and team-oriented work environment

Departmental Planning

• Meet with IT Directors on a regular basis to stay informed of current projects, future projects, and to address management's concerns

• Participate in recruiting efforts as needed

Personal Career Development

• Develop and maintain productive working relationships with company personnel, assess audit clients' satisfaction and proactively maintain contact with the audit client throughout the year
• Use technology and resources to continually learn/share knowledge with team
• Adhere to the highest degree of professional standards and strict confidentiality
• Attend professional development and training sessions on a regular basis

POSITION REQUIREMENTS

FORMAL EDUCATION:

Required:

• Bachelor's Degree in Information Systems, Accounting, Finance, Business, or related field.
  • Must be legally authorized to work in the United States without company sponsorship

Preferred:

• Advanced degrees or certifications (MBA, CISA, CISSP, CPA, CIA, etc.) preferred

KNOWLEDGE & EXPERIENCE:

Required:

• 4+ years of experience in Internal/External Audit, IT, IT Audit, or Sox Compliance

• Strong knowledge of IT general controls and audit standards

• Strong knowledge of business processes and application controls

• Must have ability to travel up to 10% of time (domestic and international)

Preferred:

• 4+ years of prior work experience from Big 4 Firm or similar public company

• Knowledge of Sarbanes-Oxley (SOX) compliance requirements and internal control frameworks (e.g., COSO, COBIT)

• Experience supporting external audits and working with external auditors

Travel: 10%