IT Internal Auditor II — SOX & IT Controls (Madrid, Hybrid)

Madrid, Spain | Full time | Hybrid | R1520116

Job Overview

The IT Internal Auditor position actively participates as a member of the audit team responsible for evaluating risks and controls within IQVIA’s business applications, IT infrastructure, and IT internal control environments with a focus on confidentiality, integrity, and availability of information.

Successful individuals in this role will demonstrate an ability to learn and apply the IQVIA internal audit methodology across all phases of the audit lifecycle from planning to reporting. Specific activities, include developing an understanding of the technologies under review, assisting with defining the audit scope, identifying key risks and controls within the audit area, designing, executing, and concluding on testing of key controls, and assisting with development of draft audit report observations for communication to audit stakeholders.

In this role you will work closely with the IT Audit Managers and Director along with other Internal Audit colleagues and external teams including the Chief Information Officer (CIO) management team and their direct reports. You will be a part of a global organization responsible for executing technology audits across IQVIA’s global and regional business units and core support functions. Lastly, you will be responsible for performing testing as part of the IQVIA Sarbanes‑Oxley (SOX) compliance testing program.

This position may require up to 15% travel including international travel which may include weekends.

Essential Functions

• Executes IT internal audit reviews and testing according to the annual IT Internal Audit plan, including fieldwork testing, documentation of results, and completion of workpapers in accordance with relevant internal and external auditing standards to determine adherence to guidelines and regulations and evaluate the effectiveness of internal controls.
• Supports the VP – Internal Audit, Audit Directors, and Audit Managers in delivering internal audit reviews.
• Assists in all audit processes, including risk assessment, planning, audit program development, execution of audit procedures, and communication of audit results and best practices to leadership.
• Determines compliance with IT policies and procedures.
• Performs analytical testing and review.
• Identifies internal control weaknesses and makes improvement recommendations.
• Performs Sarbanes‑Oxley IT compliance work, including execution of IC calculations at the end of the quarter.
• Develops and maintains effective working relationships with Internal Audit stakeholders.
• Assists in preparation of draft audit reports for management review.
• Participates in the continuous improvement of the Internal Audit department, including providing training and feedback related to audit activities.

Qualifications

Required qualifications:

• Bachelor’s Degree in Information Technology, Cybersecurity, Information Systems, Computer Science, Business Administration, or related area.
• Excellent written and oral communication skills, strong organizational and analytical skills, and project management experience.
• Minimum of 2 years of professional experience, preferably including internal audit. Auditing work experience is preferred; however, business/operations experience may be deemed adequate.
• Knowledge of the Sarbanes‑Oxley Act and methodologies for achieving compliance.
• Understanding of general auditing (GAAS) principals.
• Strong interpersonal skills with ability to work closely with people at all levels of the organization.
• Demonstrated ability and desire to improve individual performance and advance the efficiency and effectiveness of the department.
• Ability to work in a highly complex environment under general direction.
• Ability to effectively communicate audit issues and recommendations in both technical and non‑technical terms to management.
• Working knowledge of general and application controls, systems/application development, business continuity and disaster recovery, and technology areas including networks, communications, operating systems, databases, cloud computing, web technologies, and information technology governance standards and industry best practices (e.g., ISO, NIST, ITIL, etc.).

Preferred qualifications:

• Has obtained or actively pursuing professional technology certification such as Certified Information System Auditor (CISA), Certified Internal Auditor (CIA), Certified Information Security Manager (CISM), Security+, or equivalent.
• Experience using data analytics and visualization tools such as Power BI, Spotfire, Alteryx, etc.
• Familiar with data privacy regulations and controls (e.g., HIPAA, CCPA, GDPR, etc.).
• Familiar with LEAN principles and practices.
• Familiar with Microsoft Azure or Amazon Web Services (AWS) concepts and services.
• Excellent written and oral communication skills, strong organizational and analytical skills, and project management experience.