Internal Audit - Technology Audit Manager

We are a specialty retailer offering the very best of what’s next in fashion for men, women and children since 1901.

JOIN US WHERE IT ALL BEGAN.

Whether you design clothes or business strategies, crunch numbers, lead projects or write code, we have a place for you at our Seattle headquarters. And we think Seattle is a pretty great place to live. More than just rainy days and coffee, Seattle has it all — mountains and beaches, arts and parks, music and film. It's made up of quirky neighborhoods, award-winning restaurants, and thriving industry. Come see for yourself!

A day in the life…

Internal auditing is an independent, objective assurance and advisory activity designed to add value and improve an organization's operations. It helps an organization accomplish its objectives by bringing a systematic, disciplined approach to evaluate and improve the effectiveness of risk management, control, and governance processes.

To that effect, the Technology Audit Manager primarily performs advanced level and/or managerial professional internal auditing and advisory work involving managing or conducting projects focused on strategic and operational risks in the technology space. They will provide career development coaching and supervision for a number of direct reports and will also supervise internal audit teams conducting audit projects. They will provide advisory services to the organization’s management and staff; and provide input to the development of the risk-based internal technology audit plan. This position also provides coaching and guidance to Nordstrom management on risk and control. The Technology Audit Manager must adhere to all organizational and professional ethical standards and ensure all Internal Audit activities are in compliance with The Institute of Internal Auditor’s (IIA’s) International Standards for the Professional Practice of Internal Auditing (Standards). This position works independently under general supervision and thrives in an environment with considerable latitude for initiative and independent judgment.

Ideal candidates will possess a strong balance of technology and business audit capability and experience with a strong background in technology and business processes. The Technology Audit Manager will work closely with business operational auditors overseeing integrated audit teams. They will also work closely with the Information Security Technology Audit Manager and audit principals to build strong technology stakeholder relationships and advance the technology audit program, plan, techniques, and knowledge.

Responsibilities

Risk Assessment

Identify and evaluate the organization’s technology risk areas and provide key input to the development of the internal audit plan.

Audit Execution

Oversee primarily technology audit projects and internal technology audit engagements of various complexities from planning to communication of results, organizing work, and supervising audit leads and teams of varying sizes. Oversee and support the execution of audit engagements, including the following: Defining audit scope, performing risk and control analysis, designing audit programs, conducting interviews, developing and administering surveys and/or benchmarking, collecting and analyzing evidence, documenting processes and procedures, developing work papers, performing root cause analysis, and composing audit memos. Support audit teams in identifying, developing, and documenting audit issues and recommendations for improvement using independent judgment over areas reviewed, and performing follow-ups on management action plans in response to previously identified audit issues. Adhering to IIA and Nordstrom Internal Audit professional practice standards to ensure quality of planning and delivery of audit engagements. Oversee, lead or participate on additional special projects as assigned by audit leadership.

Leadership and Communication

Inspire and guide direct reports, project team and individuals on the team by emulating high performance, building trust and commitment while exercising a growth mindset, and driving results through acting as a role model. Communicate or assist in communicating the results of audit and consulting projects via written reports and oral presentations on a timely basis to management and the Board of Directors. Develop and maintain productive team-oriented client and co-worker relationships through individual contacts and group meetings. Provide or assist in providing training, coaching, and guidance to Nordstrom Management when conducting audits and other audit-related engagements. Provide or assist in providing training, coaching, and guidance to direct reports and other co-workers on areas of expertise or experience. Set clear performance standards for team members, monitor and address staff performance and workload. Assist with hiring and evaluating staff performance, Provide career coaching and development opportunities to direct reports. Identify employee strengths and deploy resources to maximize department output. Align talent with key work areas of focus. Advocate Nordstrom internal audit function and its value on organizational project teams, at management meetings, and with external organizations. Challenge the norm and seek new ways of working towards goals. Initiate, manage and cope with changes.

Development

Pursue professional development opportunities, including external and internal training and professional association memberships and certifications, and share information gained with co-workers.

Qualifications

Education and Experience:

Bachelor’s degree from an accredited college or university preferably in information systems, computer science, engineering or other related Technology field. Equivalent experience may be substituted for this requirement. A graduate degree in business administration or related field, or a certification/degree in a specialty field related to Technology (e.g., CISA, or CISSP, or CISM etc, Technology auditing, computer science) Equivalent experience may be substituted for this requirement At least 10 years of full-time experience in technology auditing (business operational auditing is a plus), or other audit or advisory roles, such as consulting, business analysis, quality assurance, program evaluation, or public accounting with an emphasis in technology. For those without an audit or consulting background, we are seeking individuals with 10 or more years of full-time experience in Technology such as Information Security, Systems Development, technology Service Delivery, Project Management, Quality Control, IT Infrastructure, IT Operations, IT Processes, IT Governance, Database Management, or Network.) obtained within Nordstrom, or in other retail environments, or large multichannel international organizations. All candidates should possess a minimum of 2 years of supervisory or project management experience. Minimum 2 years of people management experience supervising direct reports

Must also have the following demonstrated knowledge, skills, and abilities:

Knowledge

Considerable knowledge of and skill in applying technology auditing principles including IT Controls Framework, COBIT, ISO, NIST, SANS, or Global Technology Audit Guides (GTAG) Knowledge of or ability to learn/use the IIA Standards and Code of Ethics. Knowledge of management information system terminology, concepts, and practices. Knowledge of contemporary risk management and control techniques and control frameworks. Knowledge of industry programs, policies, procedures, regulations, and laws. Familiarity with the common indicators of fraud.

Technical Skills

Understanding of technology Strategic Risks, IT Governance, IT Infrastructure, Information Security and Enterprise Architecture. Ability to perform assessments for Retail and Credit Card Applications such as Merchandising, POS, Inventory, or Card Processing. Ability to review DevOps, Waterfall, Agile, Rapid Application Develop, and Proof of Concept software development methodologies. Ability to perform reviews of Operating Systems, Network, Database, web and ERP applications such as Oracle. Understanding of open source technologies and cloud architectures and risks Skill in conducting work quality control reviews. Considerable computer skills, including word processing, spreadsheet, PowerPoint, systems documentation, audit and data analysis packages, and other business software to prepare workpapers, reports, memos, summaries, and analyses. Skill in collecting and analyzing complex data, evaluating information and systems, and drawing logical conclusions. Ability to learn and apply complex and varied techniques (Six Sigma, statistical sampling, operational research, business process analysis modeling, etc.) Ability to absorb and understand a large amount of information in various areas (finance, accounting, technology, legal, human resources, governance, risk, control, operations, retail, banking, etc…). Considerable skill in planning and project management, and in maintaining composure under pressure while meeting multiple deadlines.

Interpersonal and Communication Skills

Effective verbal and written communications, including active listening skills and skill in presenting findings and recommendations for improvement. Skill in negotiating issues and resolving problems. Ability to establish and maintain harmonious working relationships with co-workers, department members, and external contacts, and to work effectively in a professional team environment. Ability to nurture instrumental relationships, working with others toward shared goals. Critical thinking capability to gather relevant information, perform detailed analysis and develop well-reasoned conclusions and solutions. Ability to consciously exploit new ideas or reinvent ideas to provide new solutions.

Other

Customer focused mindset, providing amazing customer experiences, both internally and externally.

We’ve got you covered…

We offer a comprehensive benefits package that includes medical, vision and dental coverage, a fabulous merchandise discount, an employer-matched 401(k) plan, employee stock purchase plan and much more depending on your role.

We are an equal opportunity employer committed to providing a diverse environment.

This job description is intended to describe the general nature of the work employees can expect within this particular job classification. It is certainly not a comprehensive inventory of all duties, responsibilities and qualifications required for this job. #LI-JM1