Advising IT Audit Professional

At Devon, we will offer you a career full of energy and unmatched opportunities to solve today’s greatest challenges. Innovation, creative problem-solving and positive change happen when people step out of their comfort zone and think differently. Our values, workplace practices, wellness programs, benefits and compensation are aimed at helping employees manage their unique personal life and care for their families so they can focus on contributing to the fullest.

The Information Technology (IT) Audit Professional, operating as a subject matter expert, is responsible for contributing to the development of the annual audit plan, serving as a technical expert in IT risk assessment, providing advanced guidance in complex technical aspects of IT and Digital Security (DS) auditing, and fostering professional relationships. The role acts as a liaison between Internal Audit, IT and Digital Security, coordinates IT/DS audits, evaluates IT risk controls, and provides advisory services for optimal processes, compliance, and security. The role proactively mentors and offers guidance to junior team members and assists in resolving audit issues. The role serves as a key figure in advancing internal control advisory matters and risk mitigation, contributing to effective IT governance and audit excellence.

• Contributes to the development of the annual audit plan and serves as a technical expert with respect to IT risk assessment matters and provides advanced guidance and direction, particularly in complex technical aspects of IT auditing.
• Fosters professional relationships with diverse business partners and acts as the liaison between Internal Audit, Digital Security and IT, understanding strategic direction, assessing risks, and developing audit plans.
• Audits IT security, hardware, communications infrastructure, operations, systems development, applications, intranet, network engineering and other technology and IT security areas.
• Performs IT audit procedures, including identifying and defining issues, developing criteria, reviewing and analyzing evidence.
• Explains the audit process, resolves complex audit issues, and confirms understanding of findings presented in the audit report.
• Assists in coordinating resources and deliverables for annual and ongoing evaluations of IT infrastructure and evaluates controls to identify areas of risk or non-compliance.
• Provides advisory services as needed, offering support and guidance in areas related to IT auditing, ensuring optimal processes, compliance, and security measures are maintained.
• Provides guidance and support to junior team members, offering direction and development, as well as, supporting staff in problem resolution and assisting with handling audit issues.

Education:

• Bachelor's Degree in Information Technology, Management Information Systems, Computer Science, Business Administration or any other related discipline and/or commensurate work experience is required.

Experience:

• 7+ years of relevant experience, preferably in areas such as IT Audit, Information Security, Data Management and Privacy, Risk Assessment or a related field. Industry experience is preferred.

Certifications:

• Certified Information System Auditor (CISA) (preferred)
• Certified in Risk and Information Systems Control (CRISC) (preferred)

Competencies:

• Stakeholder Relationships
• Oral & Written Communication
• Results Oriented
• Active Learning
• Digital Literacy
• Business Acumen
• Innovation

Skills:

• Information Technology (IT) Risk Management
• IT Systems Knowledge
• Data Analysis
• IT Governance
• Audit Tools
• Internal Auditing Standards Knowledge
• IT Security Architecture
• Incident Management
• Crisis Management
• IT Project Management
• IT Audit Planning

Qualified applicants are considered without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, status as a protected veteran or other characteristics protected by law.

For more information on Equal Employment Opportunity, please follow these links:
EEO is the Law
EEO is the Law Supplement
Pay Transparency Provision