IT Internal Auditor II IV / IT Audit Specialist

Knife River - Bismarck, ND

Full-time - Mid Level

Bismarck, ND

1-10 employees

Mining (except Oil and Gas)

About the position

The IT Internal Auditor II - IV / IT Audit Specialist at Knife River Corporation is responsible for leading various IT audit projects, assessing IT general controls, and performing consulting engagements to enhance organizational processes. This role requires collaboration with IT personnel and offers opportunities for professional growth in a dynamic work environment. The auditor will function as a subject matter expert in IT risk and controls, develop data analytics for internal audits, and conduct risk assessments while ensuring compliance with company policies and regulations.

Responsibilities

• Leading various IT projects involving complex information technology assignments including IT governance, cybersecurity, and implementations/conversions.
• Auditing IT general controls to ascertain their design and operational effectiveness.
• Performing consulting engagements to improve efficiency and effectiveness of processes across the organization.
• Providing guidance and recommending improvements as a subject matter expert for IT risk and controls.
• Developing data analytics for internal audit, including data analytic projects and continuous monitoring techniques.
• Reviewing internal controls, processes, and integrations after newly acquired companies implement Knife River systems and processes.
• Auditing information reported externally, such as Proxy and Sustainability Reports.
• Performing comprehensive risk assessments.
• Coordinating with and interviewing personnel across the company.
• Analyzing complex data to support audit findings.

Requirements

• Bachelor's degree in information technology, computer science, information security, management information systems, cybersecurity, or accounting, or equivalent experience.
• Two years' experience in information technology, data analytics, IT risk management, IT governance and controls, or auditing.
• Experience in IT controls assessment, IT security, internal controls, process improvement, project management, third-party vendor management, or quality assurance.
• Experience in extracting, handling, mining, and querying large and/or complex data sets.
• Advanced knowledge of systems and databases such as JD Edwards EnterpriseOne, Oracle, Windows, Active Directory, Linux, AS400.
• Certification as an Internal Auditor (CIA), Public Accountant (CPA) or Fraud Examiner (CFE), or various IT certifications are a plus.
• Advanced knowledge of common frameworks such as CMMC, NIST, ISO, CIS Security Controls.
• Ability to describe findings to both technical and non-technical audiences.
• Good organizational skills and the ability to multi-task and prioritize to meet deadlines.
• Advanced communication skills (written and oral) are essential.

Nice-to-haves

• Experience with technology risk assessments.
• Ability to maintain confidentiality of corporate information.

Benefits

• Highly competitive salary and annual incentive plan
• Comprehensive medical, dental, vision, life, and disability benefits programs
• 401k retirement savings program, with matching and additional retirement contribution
• Health and wellness programs
• A fun, inclusive, people-first culture