Lead IT Auditor

As a Lead IT Auditor joining the Global Audit Department, you will have the opportunity to oversee a small team of IT Auditors and provide coaching and mentoring on a daily basis. In this role you will manage the execution and detail or general review of IT Audits, inclusive of ITGC’s, application controls, system conversions, and other operational audits. As the Lead IT Auditor, you will be meeting with external auditors and key IT and business stakeholders on a daily basis to resolve issues and enhance business processes within the organization. Here at Sherwin-Williams, the Lead IT Auditor will also help ensure the team adheres to the highest degree of professional standards and strict confidentiality.

Because this role involves access to confidential financial information, the Company has determined that a review of criminal history is necessary to protect the business and its operations and reputation and to provide similar protections for its clients and potential investments.

At Sherwin-Williams, our purpose is to inspire and improve the world by coloring and protecting what matters. Our paints, coatings and innovative solutions make the places and spaces in our world brighter and stronger. Your skills, talent and passion make it possible to live this purpose, and for customers and our business to achieve great results. Sherwin-Williams is a place that takes its stability, growth and momentum and translates it to possibility for our people. Our people are behind the strength of our success, and we invest and support you in:

Life … with rewards, benefits and the flexibility to enhance your health and well-being
Career … with opportunities to learn, develop new skills and grow your contribution
Connection … with an inclusive team and commitment to our own and broader communities
It's all here for you... let's Create Your Possible

At Sherwin-Williams, part of our mission is to help our employees and their families live healthier, save smarter and feel better. This starts with a wide range of world-class benefits designed for you. From retirement to health care, from total well-being to your daily commute—it matters to us. A general description of benefits offered can be found at http://www.myswbenefits.com/. Click on “Candidates” to view benefit offerings that you may be eligible for if you are hired as a Sherwin-Williams employee.

Compensation decisions are dependent on the facts and circumstances of each case and will impact where actual compensation may fall within the stated wage range. The wage range listed for this role takes into account the wide range of factors considered in making compensation decisions including skill sets; experience and training; licensure and certifications; and other business and organizational needs. The disclosed range estimate has not been adjusted for the applicable geographic differential associated with the location at which the position may be filled. The wage range, other compensation, and benefits information listed is accurate as of the date of this posting. The Company reserves the right to modify this information at any time, with or without notice, subject to applicable law.

Qualified applicants with arrest or conviction records will be considered for employment in accordance with applicable federal, state, and local laws including with the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act where applicable.

Sherwin-Williams is proud to be an Equal Employment Opportunity employer.  All qualified candidates will receive consideration for employment and will not be discriminated against based on race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, disability, age, pregnancy, genetic information, creed, marital status or any other consideration prohibited by law or by contract.

As a VEVRAA Federal Contractor, Sherwin-Williams requests state and local employment services delivery systems to provide priority referral of Protected Veterans.

Please be aware, Sherwin-Williams recruiting team members will never request a candidate to provide a payment, ask for financial information, or sensitive personal information like national identification numbers, date of birth, or bank account numbers during the application process.

CORE RESPONSIBILITIES AND TASKS

Execute annual Sarbanes-Oxley (SOX) compliance program

• Stay up to date on current guidance and methodologies and implement best practices to streamline approach to reduce costs and improve efficiencies 

• Manage the completion of ITGC and business process walkthroughs including the preparation and review of supporting documentation to meet internal and external deadlines
• Work independently with IT and the business to understand application systems, business processes, resolve issues and communicate findings
• Detail or general review control procedures over key ITGC and financial business processes
• Coordinate and collaborate with external auditors and management to strategically resolve identified issues and lead efforts to ensure risk remediation and risk mitigation procedures are documented appropriately
• Understand SW’s divisions and in-scope IT applications, including key data flows, in order to continuously identify opportunities for compliance improvement
• Consult with key process and control owners on ITGCs, application controls, and IPE considerations for key systems within the organization.

Execute internal audits over critical IT applications, ERP systems, and other IT focused areas (i.e. system conversions, cybersecurity, DB/OS)

• Lead efforts around the key components of system conversions to help drive the completion of SDLC assessments (i.e. data conversion, key control mapping, testing phases (i.e. SIT, FUT, UAT, etc.), security design requirements, etc.)
• Multi task key IT audit projects to completion, ensuring quality is maintained throughout the project
• Review work performed by Senior IT Auditors and IT Auditors and provide timely feedback
• Draft final reports to management
• Lead additional IT risk assessments and audit programs
• Understand key risks associated with the application, database, and operating system layers

Manage the execution of annual financial statement audit by partnering with external auditors

• Work with external auditors to communicate results and expectations
• Look for opportunities to streamline the process and better partner with external auditors

Responsible for training and developing IT Auditors

• Supervise daily work of approximately 2-3 IT Auditors
• Develop IT Auditors through coaching and mentoring
• Develop IT Auditors through effectively delegating IT audit tasks and providing guidance/learning opportunities 
• Provide performance feedback, training and performance reviews
• Supervise, train, and mentor IT Auditors on audit processes and assess performance of auditors for bi-annual reviews
• Manage field work, inform supervisors of the IT audit engagement status and manage IT Auditors performance
• Foster an efficient, innovative and team-oriented work environment

Departmental Planning 

• Meet with IT Directors on a regular basis to stay informed of current projects, future projects, and to address management’s concerns 

• Participate in recruiting efforts as needed

Personal Career Development

• Develop and maintain productive working relationships with company personnel, assess audit clients' satisfaction and proactively maintain contact with the audit client throughout the year
• Use technology and resources to continually learn/share knowledge with team
• Adhere to the highest degree of professional standards and strict confidentiality
• Attend professional development and training sessions on a regular basis

POSITION REQUIREMENTS 

FORMAL EDUCATION:

Required:

• Bachelor's Degree in Information Systems, Accounting, Finance, Business, or related field. 
  • Must be legally authorized to work in the United States without company sponsorship

Preferred:

• Advanced degrees or certifications (MBA, CISA, CISSP, CPA, CIA, etc.) preferred

KNOWLEDGE & EXPERIENCE:

Required:

• 4+ years of experience in Internal/External Audit, IT, IT Audit, or Sox Compliance

• Strong knowledge of IT general controls and audit standards

• Strong knowledge of business processes and application controls 

• Must have ability to travel up to 10% of time (domestic and international)

Preferred:

• 4+ years of prior work experience from Big 4 Firm or similar public company 

• Knowledge of Sarbanes-Oxley (SOX) compliance requirements and internal control frameworks (e.g., COSO, COBIT)

• Experience supporting external audits and working with external auditors

Travel: 10%