Job Description

Job Posting

CHS has an exciting opportunity in our Internal Audit group. We are looking for a Lead IT Auditor to lead the IT risk-based audit initiatives that align with business strategies and objectives of CHS, as well as provide direction and support for IT solutions that enhance mission-critical business processes. In this role you will partner with various internal and external stakeholders including our external audit firm, Internal Controls, IT Security, Information Security Office, and IT leadership to assess risks associated with design, and operating effectiveness of internal controls. You must have excellent communication skills, both verbal and written and possess the ability to develop strong partnerships with cross functional teams. You must be able to effectively organize, prioritize, manage and meet multiple deadlines.

You will:

* Plan, develop and execute complex IT risk-based audits in accordance with Internal Audits methodology and report audit results to all levels of management.
* Identify and document IT and business process risks by participating in formal walkthroughs with process owners.
* Perform annual Sarbanes-Oxley (SOX) testing and report deficiencies to Internal Controls, Information Security Office and other internal and external stakeholders.
* Manage audit expectations regarding deliverables and timing. Deliver service in a timely manner with minimal disruption. Ensure audit results are focused, clear, accurate, and well presented.
* Assist IT Audit Manager with managing consulting resources and co-source arrangements including project delivery and contractor performance.
* Work with CHS' external audit firm to improve design and operating effectiveness of CHS IT controls. Leverage relationship with external audit to improve testing approach and reliance on internal management testing results.
* Evaluate operating systems, networks, and database security and configuration.
* Approach the assessment of system controls with professional skepticism and create an environment and culture that promotes open and direct communication in pursuit of the right control design.
* Regularly engage with various internal stakeholders including Internal Controls, Information Technology, Finance leadership and business unit leaders, to provide periodic audit status updates.
* Collaborate with management to develop effective remediation strategies for identified deficiencies.
* Plan, assign, and supervise the daily activity and work of audit staff to ensure completion of planned audits. Ensure quality assurance objectives and achievement of IIA standards within IT audits.
* Maintain and promote a strong safety culture and follow all safety policies, procedures and regulations. Identify and communicate workplace hazards and correct or seek assistance in correcting unsafe actions or conditions.

Basic Qualifications: (required)

* Bachelors degree Information Technology, Accounting, Finance, or related business degree.
* 7 plus years experience in IT Audit, IT, Information Security Risk Management, or related technology experience.
* Certification in one or more of the following; CISA, CISSP, CIA, CPA.
* Previous experience with the following:
* Developing risk-based audit plans.
* Testing IT General Computer Controls and SOX 404 requirements.
* Assessing, identifying, and reporting internal control risks.
* IT Governance, IT Security, application, networking, and database audits
* Distributed environments (Windows, UNIX, OS400), relational database platforms (SQL), web applications, network administration, and network security.
* Risk and control concepts related to social media, Disaster Recovery and Business Continuity, vendor management, cloud computing, IoT, and mobile applications.
* Demonstrated organizational, project and process management skills
* Ability to:
* Influence decisions and actions at a senior level
* Lead large-scale, cross functional initiatives
* Select, develop staff, and work in a team environment to achieve desired results
* Ability to travel domestically and internationally (up to 10%)

Preferred Qualifications: (desired)

* IT audit experience with Big 4 public accounting firm working with a large, diverse organizations.
* 1+ years of experience directly leading a team
* 1+ years experience with SAP security, Basis, automated and manual application configuration controls.
* SAP, Oracle, or other ERP system development, implementation, and configuration.
* Experience working in an Internal Audit department with a large multi-national company.
* Experience with Statement on Standards for Attestation Engagements (SSAE)16 audits and developing and evaluating Service Organization Control (SOC) reports.
* Understanding of COBIT and COSO frameworks.
* Commodity trading/Agricultural background.