Senior IT Auditor with English

Senior IT Auditor with English

Huggies®. Kleenex®. Cottonelle®. Scott®. Kotex®. Poise®. Depend®, our brands are present in the lives of people all over the world. We are founded on 150 years of market leadership and we are always looking for new and better ways of doing business, especially when it comes to product and process innovation. Our clients are always looking for the new and the best. Our competitors do not stop evolving. Our communities demand responsible corporate practices. We need used and transformative ideas of people that can transform them into reality. Isso means there is no time like this to make an impact at Kimberly-Clark. It's all here for you at Kimberly-Clark.

As a member of the Internal Audit team, this individual will be involved in performing Kimberly Clark’s audit activities to primarily identify and assess technology related risks and controls, as well as operational, compliance, and business process risk and controls.

The Sr. IT Auditor will provide project-level supervision to junior members of the Internal Audit team. Where necessary, the individual will work with external service providers. By executing audit activities, the individual will objectively evaluate key risk areas to identify meaningful, value-added improvement opportunities and share results with management.

**Primary Duties**

Specific activities related to the execution of audit activities will include:

- Serve as a key participant in advancing the data analysis capabilities of the Internal Audit department
- Identify opportunities to partner with audit teams and utilize analytics to improve risk assessment, audit coverage and execution, and/or identification of issues
- Independently, and/or in coordination with Audit Management and staff perform internal audits of IT activities and other business functions to determine compliance with internal policy, regulatory requirements, FFIEC guidance and industry standards.
- Review IT general controls, management self-assessments, system documentation and K-C artifacts to assess risk-based control effectiveness.
- Review business unit service provider management reports (e.g., SOC reports), due diligence, service level agreements and other supporting documentation to determine the adequacy of vendor management controls.
- Conduct risk-based focused audits and independent reviews to address prior audit issues, exam findings, control deficiencies that require immediate or planned follow-up, requested by Board Committees or the Audit Committee and agreed up by the VP of Internal Audit.
- Provide consulting support to the Information Technology department and business units in both structured and informal projects.
- Maintain IT Audit standards, procedures, files, and resource information in accordance with ISACA, IIA and K-C guidelines and policies.
- Conduct special assignments as requested by the Senior IT Audit Manager.
- Maintain a working knowledge of information security assessment industry standards/best practices and compliance with information security-related laws and regulations (e.g., SEC, PCI-DSS, HIPAA, and other state/regulatory data privacy laws).

**Mandatory Qualifications**:

- A minimum of 5 or more years of professional information technology, control or security work experience
- A minimum of 2-3 of professional information **technology auditing** experience is required.
- A bachelor’s degree is required. A bachelor’s degree in Computer Science, Computer Information Systems, Technology, or Auditing is preferred.
- Experience working with and auditing of network and infrastructure technology, including information security and policy controls, cybersecurity assessments, database administration systems, disaster recovery planning, systems development life cycle and project management control practices.
- Demonstrated proficiency with Windows, Microsoft Office software (Excel and Word) and audit documentation software.
- Possess good judgment, ability to accept responsibility and handle confidential information.
- Accurate work, with strong attention to detail.
- Excellent verbal and written skills required.
- Must be a self-starter with organizational and planning skills and able to complete assignments in assigned time-frames.
- Customer service oriented
- Ability to travel 10% - 15%, both international and domestic. -(US, Asia, Global)
- Flexibility to work with teams from different time-zones
- Quick learner to learn new auditing processes.
- Fluent Business English

**Preferred Qualifications**:

- Understanding of manufacturing and/or consumer products industries.
- Certification as a Certified Information System Auditor (CISA), or Certified Information Systems Security Professional (CISSP) is preferred.
- Knowledge of the Information Systems Audit and Control Association’s (ISACA) Control Objectives for Information and Technology (COBIT) standards, ITIL, NIST, ISO27002
- Working knowledge of information security assessment