Sr. IT Audit Consultant

Build an exciting, rewarding career with us – help us make a difference for millions of people every day. Consider joining the Duke Energy team, where you'll find a friendly work environment, opportunities for growth and development, recognition for your work, and competitive pay and benefits.

·        Plan and execute risk-based IT, cybersecurity, emerging technology, and technology-enabled audit and consulting engagements with limited supervision, including oversight of the day-to-day activities of assigned audit staff personnel, where applicable.

·        Develop audit objectives, scope, testing strategies, and procedures that appropriately address identified risks.

·        Evaluate the design and operating effectiveness of governance, risk management, and control processes using sound professional judgment and an appropriate level of professional skepticism.

·        Gather and analyze data, using reasoning and logic, to identify trends, assess risks, support audit conclusions, and develop practical recommendations.

·        Prepare clear, accurate, and well-supported audit documentation, observations, reports, and other engagement deliverables.

·        Monitor audit progress against established milestones, budgets, and quality expectations and exhibit a sense of urgency in completing assigned work.

·        Monitor and track the status of post-audit action plans and perform follow-up procedures to validate implementation and risk mitigation.

·        Demonstrate written and oral communication skills with the ability to tailor messages for varying audiences and levels of management.

·        Build and maintain effective relationships with audit customers, business leaders, subject matter experts, external auditors, and other assurance providers.

·        Participate in annual risk assessment processes, including identifying key technology, cybersecurity, and emerging risks and supporting development of the annual audit plan.

·        Maintain and leverage current knowledge of Duke Energy's strategic objectives, information technology, cybersecurity, data governance, privacy, emerging technologies, the energy industry, and leading practices.

·        Use data analytics, visualization, automation, and AI-enabled audit techniques to improve audit quality, efficiency, and coverage and contribute to improvements in audit methods and tools.

• Requires technical skills and advanced knowledge or experience in varied information technology fields, including cybersecurity and information security, IT governance and controls, identity and access management, operating systems, databases, application development, systems development life cycle, Agile and modern architecture, cloud technologies, data governance, privacy, digital transformation, artificial intelligence, and emerging technologies.
• Demonstrated ability to independently plan and execute risk-based audit, compliance, risk, or technology-related assignments.
• Working knowledge of IT governance, cybersecurity, technology controls, and risk management concepts.

• Bachelor's degree in Computer Science, Management Information Systems, Information Technology, Cybersecurity, Engineering, Accounting, Business Administration, Economics, Data Science, Artificial Intelligence, or a related discipline.
• Three (3) or more years of relevant professional experience in IT auditing, cybersecurity, technology risk management, information security, public accounting, consulting, major systems implementation, or a related field.

·        Five (5) or more years of relevant professional experience in IT auditing, cybersecurity, technology risk management, information security, public accounting, consulting, major systems implementation, or a related field.

·        Advanced degree, such as an MBA or a master's degree in Information Systems, Cybersecurity, Data Analytics, Data Science, Artificial Intelligence, or a related field.

·        Holds or is working toward one or more relevant professional certifications, such as CISA, CISSP, CISM, CRISC, CIPP, CIA, PMP, PE, or a relevant cloud, artificial intelligence, data science, or analytics certification.

·        Experience within a large public accounting firm, consulting firm, Fortune 500 company, utility, energy company, or highly regulated organization.

·        Experience leading complex audit, risk, compliance, technology, or major systems implementation assignments.

·        Experience auditing or assessing cloud environments, cybersecurity programs, data governance, digital transformation initiatives, artificial intelligence, or emerging technologies.

·        Written and oral communication skills with the ability to tailor messages for varying audiences and levels of management.

·        Resourcefulness and sound judgment when managing through ambiguity, including complex audit projects.

·        Ability to work independently, balance multiple projects, and deliver results within established milestones.

·        Ability to identify and assess risks and impacts and develop and manage a risk-informed audit scope and approach.

·        Acknowledgement of customer needs and expectations, including the ability to adjust tasks appropriately to add value to the business.

·        Project leadership experience, including the ability to guide and coach assigned audit staff.

·        Data analytics, visualization, automation, or AI-enabled audit experience.

Privacy

Do Not Sell My Personal Information (CA)

Terms of Use

Accessibility

#LI-PG1

#LI-Hybrid