Loading...
 
Share this Job

Senior Manager, IT Audit

Location: 

Parsippany, NJ, US

Property Name:  Parsippany - 22 Sylvan Way
Req Id:  18491

Wyndham Hotels & Resorts is now seeking a Senior Manager, IT Audit to join our team at the Parsippany - 22 Sylvan Way location in ParsippanyNew Jersey.

Job Summary

The IT Audit Senior Manager will be IT-focused and thus assist in providing independent assurance that technology related internal controls are operating effectively within the Company’s operating units worldwide, and that the Company is in compliance with best practice, internal policies and regulatory requirements. 

The candidate will be expected to collaborate with both internal and external constituents, develop a network of relationships across the Company and facilitate risk assessments on which the IT-focused audit plan will be developed. The individual will also be expected to react to business unit requests for specific audits or reviews as required. Support for achieving compliance in areas such as SOX, Information Security and PCI in the form of guidance, testing and assurance will also be required.

The role will independently manage engagements and have supervisory responsibilities. This position requires the ability to work in a complex and dynamic business environment with the flexibility to work in different countries and in a multicultural environment. The position will be U.S. based.

The IT Audit Senior Manager will report to the Senior Director, Audit Services - Assurance.


 

Responsibilities

•    Auditing

  • Perform the System Development Lifecycle (SDLC) audits for large implementation
  • Perform an annual risk assessment to create an appropriate IT SOX scope, which will be aligned with the external auditor
  • Participate in annual/biennial IT Risk Assessment to develop Audit Plan
  • Execute projects from the annual Audit Plan, including process evaluations to improve operational efficiencies and audit reviews to enhance internal controls
  • Schedule and perform the audit engagements and organize and manage any extra resources required. 
  • Draft audit reports and present findings and recommendations to line management.
  • Agree final reports with line management and agree action plans to remediate risks and issues. 
  • Formulate recommendations to improve internal control processes and other value adding opportunities, as appropriate.
  • Follow up outstanding action points within an agreed timetable and ensure that all issues are closed in a timely fashion.
  • Scope of audits may include any of the following: 

    IT general controls – process reviews and testing of change management, security administration, computer operations, physical security, and other relevant IT general controls
    Information Security – plan and execute audits to ensure compliance with Information Security standards
    Compliance – project assurance work associated with initiatives such as PCI compliance
    Project audits – execute projects to determine if significant IT projects are on time, within budget, and in compliance with relevant methodologies.
    Financial Audit Assistance – work with financial and operational internal auditors to provide support for audits by extracting and analyzing data from financial systems using software tools such as CAATS, ACL, etc.
o    Execute internal audits based on agreed to work programs.
o    Provide input for the development of new work programs as required, and provide feedback on the improvement of current work programs.

•    Compliance Assistance: 
o    Assist in the completion of design effectiveness and operating effectiveness tests.
o    Communicate and coordinate with external auditors around the division of test work around external assertion/opinion.

•    Business Segment Assistance:
o    Provide consultative assistance to business segments relative to the design of application controls and security related controls for system implementations with a view to building in internal controls that are commensurate with the size and complexity of the operations.
o    Work on special technology related projects for business units as requested. 
•    Communication:
o    Participation in internal planning meetings and regular communications within the Internal Audit Department. 
o    Regular contact with the Senior Director, Audit Services - Assurance to communicate plans and activities.
o    Regular contact with business unit IT management and maintenance of knowledge of business unit plans and strategies. 

Travel Requirements


Candidate must have the ability to travel 25% during the year and potentially multiple weeks at a time. Most travel is domestic but international travel may be required occasionally. 

 

Qualifications and Experience

•    BA/BS degree in Management Information Systems, Computer Science, or related field
•    7 to 10 years of working experience in Information Security or IT audit; supervisory experience a plus
•    In-depth knowledge of multi-layer and multi-technology networks, system, application, and database security, Information Security benchmarks (NIST, CIS, ISACA), privacy laws, Information Security risks and trends
•    Solid background with infrastructure technologies diverse operating systems (e.g.,  UNIX/Linux and Windows platforms), Network security devices (e.g.,firewalls, intrusion detection and prevention systems, proxies, network taps), and relational databases (e.g., Oracle, Microsoft SQL, Amazon Redshift, DB2,)
•    Solid understanding of Backup and Recovery best practices and methodologies as well as the industry technologies utilized (e.g., Veritas, Veeam, Commvault) 
•    Solid understanding of PCI, ISO/IEC 27000 series, ITIL and COBIT standards, European data protection, IT infrastructure and processes, IT governance, project management, principles of internal controls 
•    Ability to independently evaluate controls over security processes, infrastructure, network, applications and databases according to established timetables and requirements
•    Security and Audit certifications (e.g., CIPP, CISSP, CISM, or CISA) are desirable
•    Working knowledge of relevant data analytics tools such as ACL / IDEA; SQL or scripting knowledge a plus
•    Working knowledge of relevant auditing tools such as AuditBoard is desirable
•    Aptitude for business processes and controls and an understanding of how IT supports and impacts business functions
•    Team player with a positive “can do” attitude, willingness to learn new concepts in a fast paced environment, be a self-starter, and accept responsibility to meet deadlines
•    Strong verbal and written communication skills

Complexity

The IT Audit Senior Manager must be able to work independently, as well as, collaboratively with the internal and external teams. The position requires the ability to determine the level of operating effectiveness of the controls tested. The IT Audit Senior Manager will provide guidance and recommendations to internal business partners over technologies.  


Organizational Relationships
The IT Audit Senior Manager will communicate results of control testing to the Senior Director, Audit Services. Communication will occur as often as necessary. 

COMPANY OVERVIEW:
Wyndham Hotels & Resorts is the largest hotel franchisor in the world and a leading hotel management company.  We stand 22 brands strong across 9,000 hotels in more than 95 countries, and we offer the most diverse collection of hotel experiences in the world.  Our iconic brands, united by the richest and simplest rewards program in the business, make hotel travel possible for all.

Our hotel owners are the stewards of our brands, and together, we champion everyday travelers.  We believe guests deserve great experiences, and our robust portfolio—distinguished by our leading economy and midscale brands—delivers just that.

We are AmericInn® by Wyndham, Baymont® by Wyndham, Days Inn® by Wyndham, Dazzler® by Wyndham, Dolce Hotels and Resorts® by Wyndham, Esplendor® Boutique Hotels by Wyndham, Hawthorn Suites by Wyndham®, Howard Johnson® by Wyndham, La Quinta® Inns & Suites, Microtel  by Wyndham®, Ramada Encore by Wyndham, Ramada Worldwide® by Wyndham, Registry Collection Hotels, Super 8® by Wyndham, The Trademark Collection® by Wyndham, Travelodge® by Wyndham, TRYP by Wyndham®, Wingate by Wyndham®, Wyndham Alltra, Wyndham Garden®, Wyndham Grand® and Wyndham Hotels and Resorts®.

Headquartered in Parsippany, N.J. with offices around the globe in London, Shanghai, Buenos Aires, Dubai and more, Wyndham Hotels & Resorts employs approximately 9,000 team members worldwide.

Our Company is an Equal Employment Opportunity Employer.

Job Location: Parsippany - 22 Sylvan Way22 Sylvan WayParsippanyNew Jersey  07054
Employment Status: Full-time

What we expect from you

• Bring your best every day

• Put our guests first

• Strive to exceed expectations in all you do

What you can expect from us

• Best-in-class training and career development

• Supportive and engaged team

• Fast paced fun environment

About Wyndham

Wyndham Hotels & Resorts is the champion of the everyday traveler. Through the largest and widest collection of hotel experiences in the world, we work to make hotel travel possible for all. Wherever and however people travel, Wyndham will be there to welcome them.


Nearest Major Market: New York City
Nearest Secondary Market: Newark