JOBS Systems Control IT Auditor

We are looking for qualified candidates to join our growing Strategy and Analytics practice. Consultants will perform a range of functions for Department of Defense & other public sector clients, including IT Auditing and the review and testing of Enterprise Resource Planning (ERP) Security Design. Candidates will have worked with clients to review and test the design of ERP (SAP and/or Oracle) application security (system parameters and configurations) and sensitive access (critical transactions/roles, segregation of duties, tables and program security controls) that complies with the Federal Information System Management Act of 2002. Candidate is experienced in consulting with clients on the design of overall logical security of the application and relevant IT infrastructure such as databases and operating systems. Candidates will have conducted numerous ERP Control Assessments in the capacity of a IT Auditor to evaluate the design and operation effectiveness of system controls: Access Controls, Business Process Controls, Data Interface Controls, and IT General Controls. Furthermore, candidates should have experience in helping clients to resolve control deficiencies, and experience creating formal audit working papers. Knowledge of and experience with Federal Information System Controls Audit Manual (FISCAM) And Federal Information Security Management Act (FISMA) audits a plus.

We are looking for applicants with demonstrated academic records and skills in IT Auditing.

Candidates should have be a US citizen and have demonstrated verbal and communication skills and must be able to work effectively with a group of peers. Candidates should be able to meet deadlines, handle multiple tasks concurrently and be adaptable to new assignments, systems, and tools.

Selected candidates may not need to travel for all projects outside of their metro area. However, all candidates must be able and willing to travel based on assigned project demand. Travel requirements may vary but could be up to 100%. Candidates are not able to refuse project based on travel

Stay connected by subscribing to the IBMjobs blog for career insights, news and latest job opportunities.

IBM Global Business Services: Join a Leader. Consult with us.

(2252)

Required

• Bachelor's Degree
• At least 3 years experience in in consulting with clients on the design of overall logical security of the application and relavant IT infrastructure such as databases and operating systems
• At least 3 years experience in conducting numerous ERP Control Assessments in the capacity of a IT Auditor preferably w/a Big 4 Audit firm to eval the design&oper effectiveness of the system controls: Access Controls Business Proce
• At least 3 years experience in or understanding of controls frameworks in the federal setting. Familiarity with various regulatory requirements, including FISCAM and FISMA is a plus
• At least 3 years experience in creating formal working papers, documenting findings, and recommending corrective actions to resolve control deficiencies.
• At least 3 years experience in testing the design of ERP (SAP and/or Oracle) application security and sensitive access for compliance with the Federal Information System Management Act of 2002
• Security clearance of Ability to obtain and maintain a Secret Clearance
• Readiness to travel Up to 4 days a week (home on weekends-based on project requirements)
• U.S. citizenship required
• English: Basic knowledge

Preferred

• Master's Degree
• At least 5 years experience in in consulting with clients on the design of overall logical security of the application and relavant IT infrastructure such as databases and operating systems
• At least 5 years experience in conducting numerous ERP Control Assessments in the capacity of a IT Auditor preferably w/a Big 4 Audit firm to eval the design&oper effectiveness of the system controls: Access Controls Business Proce
• At least 5 years experience in or understanding of controls frameworks in the federal setting. Familiarity with various regulatory requirements, including FISCAM and FISMA is a plus
• At least 1 year experience in implementing (not just using) the SAP GRC Access Control solution - version 5.0 thru 10
• At least 1 year experience in the federal sector
• At least 5 years experience in creating formal working papers, documenting findings, and recommending corrective actions to resolve control deficiencies.
• At least 5 years experience in testing the design of ERP (SAP and/or Oracle) application security and sensitive access for compliance with the Federal Information System Management Act of 2002
• Certified in Certified Public Accountant (CPA)
• Certified in Certified Internal Auditor (CIA)
• Certified in Certified Information Systems Auditor (CISA)
• Security clearance of Secret - Active
• English : Intermediate

Additional information
To be an official applicant to IBM, you must submit a resume and online application. Resumes submitted remain active for six months.