Senior IT Auditor

Job Summary

The J.M. Smucker Co. is seeking a highly skilled Senior IT Auditor to join our Internal Audit team. As a Senior IT Auditor, you will be responsible for leading standard information technology (IT) audits and performing IT control testing, including support management's assessment of internal controls over financial reporting (ICFR), primarily for IT General Control (ITGC) areas.

Key Responsibilities

• Lead execution of full lifecycle standard technology audits, including planning, scoping, risk assessment, control identification and testing, issues management, and reporting.
• Participate in complex technology audits and cross-functional operational audits with other Internal Audit team members, performing testing and issues management.
• Assess the adequacy of solutions offered by business partners and provide input to support remediation of issues and will support the presentation of audit results to all levels of management.
• Develop new testing methods to advance internal audit testing, including through the use of analytics and automation and focus on continuous improvement of our control environment.

SOX Technology Control Testing

• Participate in the annual SOX risk assessment (key financial risks and processes with input from SOX process owners) as well as mapping the corresponding IT assets and technologies. This includes close coordination with financial internal auditors as well as SOX-related functions within Corporate Finance, Information Services, and HR.
• Identify opportunities and lead efforts to increase the efficiency of Internal Audit's work.
• Design tests of controls used to evaluate the operating effectiveness of IT General Controls within SOX audits.
• Partner with Information Services to identify IT control efficiency opportunities.
• Participate in the detailed execution of audit-related activities, including testing, issue management, and workpaper review.

Requirements

• Bachelor's Degree in Accounting, Business Administration, Finance, Information Technology, or equivalent.
• 2+ years of internal audit, external audit, or technology process and control experience.
• Experience in process improvement & control efficiency evaluations, including for SOX.
• Experience translating complex concepts (business and technical) into levels appropriate for diverse audiences.
• Experience driving change through strategic partnerships.
• Ability to analyze complex issues or conflicting data sets.
• Willingness to travel, approximately 5-10%.

Preferred Qualifications

• CISA, CPA, CIA, CFE, CRISC, or other relevant audit or risk management certification, obtained or actively pursuing.
• Experience participating in full lifecycle technology audits from planning through reporting.
• Experience in IT privacy, IT risk management, IT compliance, or information security.
• Technical understanding of IT risks and control processes, including access controls, cybersecurity, and system implementations.
• Experience using data analytics or process automation within audits.