Principal IT Auditor

Job Description

Internal Auditors in this role are responsible for conducting internal audits and consultations, primarily focusing on the IT business unit, though many reviews are integrated and cross-functional. They assist in identifying objectives and risks, as well as evaluating processes and controls. These professionals implement efficient and effective methods to test controls, including the use of data analytics where applicable, to identify recommendations for process improvement. A key aspect of their role involves preparing audit work-papers that are comprehensive, clear, concise, and well-organized to document audit results. Internal Auditors are also expected to present audit findings both verbally and in writing to various stakeholders. Additionally, they contribute to Sarbanes-Oxley compliance audits.

This position requires a combination of IT knowledge, strong analytical skills, and the ability to communicate complex findings effectively across different levels of the organization. Employees in this role will engage in the full audit process, from prioritizing risks and planning to fieldwork and communicating results. Successful internal audit team members demonstrate nine key attributes of an outstanding internal auditor: ethical resilience, results focus, intellectual curiosity, open-mindedness, dynamic communication, insightful relationships, inspirational leadership, critical thinking, and technical expertise.

Key Qualifications

• Bachelors and/or masters degree in technology or technology-related field
• Evident experience in IT-related activities such as IT Audit, Information Security Risk Management, IT Compliance and IT Infrastructure reviews
• Collaborative mindset
• Strong communication
• Strong leadership skills fostering insightful relationships
• Critical thinking and technical expertise
• Solid written and oral communication skills
• Strong Excel and analytical skills

This role offers exposure to many areas of the company, making each day unique. Internal Audit handles SOX testing, internal audits, consultations, and investigations as needed.

Preferred Qualifications

• Certified information Systems Auditor (CISA) and/or Certified Public Accountant (CPA)
• Certified Internal Auditor (CIA)
• Master's Degree
• Solid understanding of IT General Computing Controls, Technology Infrastructures, and/or Business Application design.
• Strong process analysis, risk and control identification and problem solving skills
• Solid understanding of SOX and internal controls
• Solid understanding of IT General Computing Controls, Technology Infrastructures, and/or Business Application design.
• Knowledge of information technology frameworks and industry best practices
• Strong analytical, project management and organizational skills
• Ability to balance working on multiple projects simultaneously
• Ability to network and collaborate cross-functionally

Job Overview

Employees in this job possess and apply their broad knowledge of the Company's Internal Audit principles, practices and procedures to complete difficult assignments while overseeing junior employees.

Job Duties & Responsibilities

• Conducts in-depth inquiry and data analysis to understand cyber and technology operations, assessing risk, and supporting the development of the project scope for cross-functional process areas, leveraging business knowledge and IT expertise
• Effectively directing and completing all phases of the audit process for assigned IT audits and special projects with limited to minimal supervision. Areas of review may include aspects of cyber security, cloud computing, logical access, physical access, privacy, change management, computer operations and system implementations
• Executing tests of design and operating effectiveness for Sarbanes-Oxley 404 IT General Computing key controls, as required
• Contributing to large audit projects by adding value to project scope, making recommendations, and writing audit reports
• Applying broad company knowledge, concepts, processes, procedures, and methodologies to conduct independent audit reviews
• Developing data driven and risk-based conclusions by combining knowledge of BU and IT operations, and clearly documenting findings based on testing results
• Recommending process improvements where necessary
• Planning and executing audits in accordance with the department's policies and procedures, including prioritizing work areas and monitoring progress to meet audit objectives within the scheduled time frame
• Building relationships with IT
• Performs other job-related duties as assigned

Required Qualifications

• Bachelor's Degree
• Experience: 6+ years

Preferred Qualifications

• Certified Information Systems Auditor (CISA)

NextEra Energy offers a wide range of benefits to support our employees and their eligible family members. Click here to learn more.

Employee Group: Exempt
Employee Type: Full Time
Job Category: Audit
Organization: Florida Power & Light Company
Relocation Provided: Yes, if applicable

NextEra Energy is an Equal Opportunity Employer. Qualified applicants are considered for employment without regard to race, color, age, national origin, religion, marital status, sex, sexual orientation, gender identity, gender expression, genetics, disability, protected veteran status or any other basis prohibited by law.

NextEra Energy provides reasonable accommodation in its application and selection process for qualified individuals, including accommodations related to compliance with conditional job offer requirements, consistent with federal, state, and local laws. Supporting medical or religious documentation will be required where applicable and permitted by applicable law. To request a reasonable accommodation, please send an e-mail to [email protected], providing your name, telephone number and the best time for us to reach you. Alternatively, you may call 1-844-694-4748. Please do not use this line to inquire about your application status.

NextEra Energy will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the contractor's legal duty to furnish information.

NextEra Energy does not accept any unsolicited resumes or referrals from any third-party recruiting firms or agencies. Please see our policy for more information.