IT Risk Internal Auditor Iii

**JOB DESCRIPTION**
**Title**: IT Risk Internal Auditor III

**SCOPE**
The Internal Auditor is responsible for performing assigned IT audits and compliance reviews to ensure adherence with policy, regulations, and best practices. Accountable for monitoring, auditing, and ensuring the secure operations of the facility, in-house computer systems, servers, and network. This position works closely with teams in other Information Services (IS) disciplines, capability owners, IT support, IT operations, and lines of business to help provide protection to Mouser Electronics’ information assets.

**ACCOUNTABILITIES & ESSENTIAL FUNCTIONS**
- A basic understanding of best practices in IT Security, privacy, and GRC areas and frameworks
- Understanding of basic auditing, control assessments, policy/standard/procedure writing and implementation.
- Help to develop, implement, maintain, and oversee enforcement of policies, standards, procedures, and associated plans.
- Able to understand and explain Mouser Electronics policies, standards, and processes
- Able to lead technical and business teams through audit requirements, findings, and timelines and keep stake holders informed of progress and/or obstacles.
- Provides consultative advice to internal customers to enable them to follow policy, make informed risk decisions, and develop acceptable risk mitigation strategies
- Participate in audits, tabletop exercises, and security and compliance review and planning activities
- Understands Mouser business organization, processes, and strategies
- Clearly articulate in writing and verbally the results of all assessments to management, as needed
- Generates succinct and actionable reporting to Risk Owners that provides a current status on all open issues, including remediation plans and/or exception requests
- Requires good and established time management skills to successfully meet SLAs and project deliverables
- Ability to quickly respond to issues and slipping timelines and communicate likewise
- Assist in the evaluation of new processes and software designed for the Security GRC Program
- Assist with managing and maintaining all physical and IT security systems and their corresponding or associated software and monitoring tools.
- Understand common networking and security hardware and software environments, security alerts and issues, protocols, standards, and trends.
- With minimum guidance and support will work on multiple assignments and effectively manage priorities and time (with some to occasional assistance)
- Participate in team activities as an initiator, contributor, and a good learner
- Assist with maintenance of audit data, results, feedback, and various systems used in the support of compliance activities

**SKILLS & CERTIFICATIONS**
- Understanding of one or more of the following frameworks (CobiT, ISO 27001/27002, NIST, PCI DSS, SOX 404, GDPR)
- Understanding of Disaster Recovery and Business Continuity Planning practices and best practices.
- Proficient in use of Microsoft Office Products
- Highly motivated, ethical, dependable, organized self-starter
- Expert in performing audits and able to gather the right artifacts for both internal and external audits
- Expert in ensuring compliance with the security policies and procedures
- Expert in preparing reports and report cards for the team
- Provides guidance to the lower-level staff and help train them on regulations, procedures, and security initiatives
- Able to review established procedures and identify methods to improve productivity
- Review systems used by the GRC team and find efficiencies

**Requirements**:

- Bachelor’s Degree in IT Systems, IT Security, or related field
- Understanding of four or more of the following frameworks (CobiT, ISO 27001/27002, NIST, PCI DSS, SOX 404, GDPR, CCPA, PIPL)
- Two or more of the following certifications (CISA, CISM, CRISC, CISSP, CGEIT, or other Information Security/IT Audit discipline)

Category:IT/IS

Mouser is an equal opportunity employer. Qualified applicants will receive consideration for employment without regard to race, color, sex, sexual orientation, gender identity, national origin, disability or protected veteran status.