Summary

CHS has an exciting opportunity in our Internal Audit group. We are looking for a Senior IT Auditor to lead the IT risk-based audit initiatives that align with business strategies and objectives of CHS, as well as provide direction and support for IT solutions that enhance mission-critical business processes. In this role you will partner with various internal and external stakeholders including our external audit firm, Internal Controls, IT Security, Information Security Office, and IT leadership to assess risks associated with design, and operating effectiveness of internal controls. You must have excellent communication skills, both verbal and written and possess the ability to develop strong partnerships with cross functional teams. You must be able to effectively organize, prioritize, manage and meet multiple deadlines.

Responsibilities

• 
  Plan, develop and execute complex IT risk-based audits in accordance with Internal Audit’s methodology and report audit results to all levels of management.
• Identify and document IT and business process risks by participating in formal walkthroughs with process owners.
• Perform annual Sarbanes-Oxley (SOX) testing and report deficiencies to Internal Controls, Information Security Office and other internal and external stakeholders.
• Manage audit expectations regarding deliverables and timing. Deliver service in a timely manner with minimal disruption. Ensure audit results are focused, clear, accurate, and well presented.
• Assist IT Audit Manager with managing consulting resources and co-source arrangements including project delivery and contractor performance.
• Work with CHS' external audit firm to improve design and operating effectiveness of CHS IT controls. Leverage relationship with external audit to improve testing approach and reliance on internal management testing results.
• Evaluate operating systems, networks, and database security and configuration.
• Approach the assessment of system controls with professional skepticism and create an environment and culture that promotes open and direct communication in pursuit of the right control design.
• Regularly engage with various internal stakeholders including Internal Controls, Information Technology, Finance leadership and business unit leaders, to provide periodic audit status updates.
• Collaborate with management to develop effective remediation strategies for identified deficiencies.
• Plan, assign, and supervise the daily activity and work of audit staff to ensure completion of planned audits. Ensure quality assurance objectives and achievement of IIA standards within IT audits.
  

Minimum Qualifications (required)

• 
  Bachelor’s degree Information Technology, Accounting, Finance, or related business degree.
• 5 plus years’ experience in IT Audit, IT, Information Security Risk Management, or related technology experience.
• Certification in one or more of the following; CISA, CISSP, CIA, CPA.
• Previous experience with the following:
  • Developing risk-based audit plans.
  • Testing IT General Computer Controls and SOX 404 requirements.
  • Assessing, identifying, and reporting internal control risks.
  • IT Governance, IT Security, application, networking, and database audits
  • Distributed environments (Windows, UNIX, OS400), relational database platforms (SQL), web applications, network administration, and network security.
  • SAP, Oracle, or other ERP system development, implementation, and configuration.
  • Risk and control concepts related to social media, Disaster Recovery and Business Continuity, vendor management, cloud computing, IoT, and mobile applications.
• Ability to travel domestically and internationally (up to 10%).

Additional Qualifications

• 
  IT audit experience with Big 4 public accounting firm working with a large, diverse organizations.
• 1 plus years’ experience with SAP security, Basis, automated and manual application configuration controls.
• Experience working in an Internal Audit department with a large multi-national company.
• Experience with Statement on Standards for Attestation Engagements (SSAE)16 audits and developing and evaluating Service Organization Control (SOC) reports.
• Understanding of COBIT and COSO frameworks.
• Commodity trading/Agricultural background.
  • #LI-JM1
  • #LI-HYBRID