Sr. Manager, IT Audit
Description
- Develop a strong understanding of the Company’s key business processes, risks, and control activities for information systems, technical infrastructures, e-commerce solutions, and key applications.
- Develop and execute an IT SOX program focusing on IT general controls, application controls, and reports - Perform scoping and risk assessments, develop audit procedures, review and analyze evidence, document processes, procedures, and test work.
- Direct and supervise the design and successful execution of risk-based IT and integrated audit programs based on professional internal control frameworks (COBIT, COSO, NIST, etc).
- Apply knowledge of business cycles to evaluate new applications by performing pre and post implementation reviews.
- Incorporate data privacy, disaster recovery, and other emerging concepts into IT risk and control assessments.
- Provide strategic and proactive consultation in identifying risk exposures and in evaluating solutions for internal control weaknesses.
- Assist in management of co-source partners where applicable and oversee operational and compliance audits, including the scoping, testing and documentation of the results
- Conduct and document IT walkthroughs with the purpose of identifying key controls and processes as well as proposing improvements.
- Develop and execute test plans for key automated application controls identified during business process walkthroughs such as IT-dependent manual controls, system-generated reports, system interface controls, and calculations.
- Timely communicate audit status, issues, risks, and deficiencies to audit management and key stakeholders through periodic meetings and written media as necessary.
- Evaluate the adequacy and timeliness of management's response and progress of remediation efforts for all significant weaknesses noted in IT audit reports.
- Identify themes, trends, and emerging risks for escalation and communication to IT and executive leadership.
- Perform and/or manage assigned audit projects to ensure audits are completed as scheduled and staff is utilized efficiently.
- Serve as the “go-to” person for IT risk management and internal controls within the organization providing reliable and insightful guidance for implementing controls within a business process in an efficient and effective manner.
- 8+ years of experience in external or internal audit, ideally in IT Security, application development and infrastructure support.
- Bachelor’s degree along with CISA, CIA and/or CPA
- Demonstrated experience managing audits within a complex operational and regulatory environment.
- Experience interacting with external auditors, general counsel and internal stakeholders
- Advanced knowledge of public company internal control requirements
- Strong understanding of IT risks and controls and their overall impact to financial control environments
- Strong supervisory and time management skills.
- Excellent written and oral communication skills
- Strong analytical, organizational, and presentation skills
- Proficient in Microsoft Office Word, Excel and Outlook.
- Knowledge or experience with Auditboard a plus
What Funko Offers
Funko offers a competitive compensation package with full benefits and a 401(K) plan with matching contributions from the company. Most importantly, we offer a creative work environment with people who love pop culture just as much as you do. Can’t wait to gush about your latest binge? Neither can we! Looking for a place where your favorite pop culture t-shirt will receive the compliments it deserves? We know how you feel!
Funko is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable laws, regulations and ordinances.
The above statements are intended to describe the general nature and level of work being performed by people assigned to this classification. They are not to be construed as an exhaustive list of all responsibilities, duties, and skills required of personnel so classified. All personnel may be required to perform duties outside of their normal responsibilities from time to time, as needed.