IT Audit Manager

Date: Nov 4, 2023

Location:

Houston, TX, US, 77002 Princeton, NJ, US, 08540

Company: NRG

As an NRG employee, we encourage you to think creatively and proactively about your career choices. Our work environment is dynamic and the career opportunities across our businesses offer variety and challenge. Providing career growth to our own employees is critical to our ongoing success--take charge of your career goals and empower your future!

Job Summary:

Responsible for execution of assigned IT audit plan projects, IT SOX testing, and development of junior audit staff. Under direction of the Director, provide an independent and objective opinion on the overall effectiveness and efficiency of the company’s system controls in mitigating business risks to achieve NRG’s strategy and performance objectives. Provide additional assurance services as requested by the Audit Committee of the Board of Directors or Senior Management.

Essential Duties/Responsibilities:

Manage the effective and timely execution of IT internal audit projects as assigned from the NRG internal audit plan.
Oversight and management of audit objectives, timelines and schedules, and the creation of effective audit programs.
Review and ensure adequate completion of audit work papers and memoranda, documenting audit tests and findings to effectively support the audit conclusions.
Responsible for the completion of clear, concise, and proofed audit reports that are fully supported by complete, accurate auditor work papers.
Perform IT SOX system scoping, control testing and review, document workpapers and issues, and coordinate with external auditors.
Assist the Director in management, supervision, training, and development of junior IT audit staff.
Assist in audit department planning activities including testing schedule and staffing, budget preparation, risk assessment, and other IT Audit related duties as needed.
Maintain a thorough understanding of IIA and ISACA professional auditing standards and best practice audit procedures and techniques.
Proactively interact with all levels of management to gather information, resolve problems, and make recommendations for process and control improvements.
Support and lead co-sourcing projects by coordinating information requirements and managing external auditors.
Assist department with management of data analytics, AuditBoard, post audit surveys, department SharePoint and system access.
Other duties as assigned.

Working Conditions:

Hybrid working environment working 3 days in either the Houston or Princeton office.
Some overtime required as special projects arise.
Travel up to 30% of the time as needed

Minimum Requirements:

Bachelor’s degree required, with information systems or computer science preferred, and six or more years of IT Audit or relevant experience.
Must have extensive knowledge of IT general controls, cyber security, data privacy, NIST framework, PCI, SDLC, IT operations and governance.
Proficiency in Sarbanes-Oxley compliance, advanced security concepts, emerging technologies, system implementations and project governance.
Excellent, proven communication skills required, ability to work and communicate effectively with all levels of clients including technical and non-technical clients, as well as work with teams cross-functionally.
Proven audit report writing skills with minimal rework.
Strong analytical skills and ability to consider / develop alternative solutions and “think outside of the box.”
Proven ability to handle confidential and sensitive matters.
Demonstrated ability to handle multiple assigments, meet deadlines and work under pressure in a fast-paced environment.
Motivated to work independently and complete responsibilities with little supervision yet work well and promote team-oriented culture.
Highly proficient with Microsoft Office applications, AuditBoard and other auditing and data analytics tools.
Demonstrated attention to detail
Demonstrated high degree of ethics and strong sense of business judgment, and able to operate within NRG’s published core values.
Certification relative to the practice of IT security or auditing in one or more of the followings is required: CISA, CISSP, CISM, PMP.

Preferred Qualifications:

Experience working within a NERC CIP, COBIT, ITIL and / or other leading business and IT controls frameworks.
Demonstrable hands-on skills or knowledge for various technology areas such as Information Security Topics (Identity and Access Management, Authentication Services, DevSecOps, Encryption etc.), Operating Systems (UNIX/Linux, Windows), Cloud Technologies (AWS, Azure, etc.), Networking Technologies (Software Defined Networking, Firewalls, Proxies, Routing etc.), Database Systems (Oracle, SQL Server, etc.), Data Analytics technologies (PowerBI, Tableau, etc.), and Infrastructure (servers, containers etc.).

Additional Knowledge, Skills and Abilities:

Experience in application development, IT project management, system and database administration, web application design and development preferred.
Experience working within a COSO / risk-based framework preferred.

Why NRG is a great place to work:

Great company culture!! Voted as a BEST employer by Forbes
A competitive total compensation package, including annual incentive and/or commission
Stock Purchase Plan
Benefits on the first day of employment - Medical, Dental, Vision, Life Insurance, and Short Term Disability, Wellness program, etc.
Company-paid life insurance and disability insurance
401 (k) plan to help save for retirement
Generous PTO plan, plus 8 company holidays, and 3 floating holidays
Numerous discounts, including electricity discounts on NRG brands

If you reside in or intend to work remotely from California, Colorado, New York or Washington State, you may contact Careers@nrg.com for compensation information related to this position and other information as required by applicable law. Please include the job title in your request.

#LI-SS

#CB-SS

** No Outside Recruiters or Agencies **

You must reside in the United States to be eligible for this position.

NRG Energy is committed to a drug and alcohol free workplace. To the extent permitted by law and any applicable collective bargaining agreement, employees are subject to periodic random drug testing, and post-accident and reasonable suspicion drug and alcohol testing. EOE AA M/F/Vet/Disability

Official description on file with Talent.