IT Audit Manager

Overview

Who we are

Toyota does not offer support or sponsorship of job applicants for employment-based visas or any other work authorization for this role now or in the future. You must have the right to work in the United States and not require Toyota support or sponsorship for immigration-related employment (e.g., H-1B, O-1, E-3, H-1B1, TN, F-1 OPT, F-1 STEM OPT, F-1 CPT, ‘job flexibility benefits’ [also known as I-140 or Adjustment of Status portability], etc.) now or in the future. You should not apply for this role if you will require Toyota to assist with immigration support or sponsorship now or in the future.

Who we’re looking for

Toyota’s Internal Audit Department is looking for a passionate and highly motivated IT Audit Manager. 

The primary responsibility of this role is to execute high-quality risk-based audits across Toyota’s various systems environments and IT operations, while managing a team of IT audit professionals to complete audits and assignments authorized by the Audit Committee. This role will also provide coverage of Toyota affiliates, including Private Label and select regional SFCs, and requires strong expertise in enterprise cybersecurity risk, IT strategy and governance, system development, IT operations, IT operations, business continuity, disaster recovery, third-party risk, and ITGC application controls.

Reporting to the IT Audit National Manager, the person in this role will support the Internal Audit department’s objective to provide independent assurance that Toyota’s technology and IT operations are well controlled, secure, and aligned with business and audit requirements.

What you’ll be doing

IT Audits

• Responsible for the effective delivery of IT audits over key risk areas such as SDLC, Change Management, Information Security, Infrastructure and Networks, Third-Parties, Access Management, Business Continuity Management, Data Protection and Privacy, etc. The audit lifecycle includes planning and design of audit criteria, development and execution of test attributes, review and analysis of evidence, identification and definition of issues, and creation of concise and organized audit work papers.

• Review work of team members; provide feedback/questions when applicable and ensure quality work paper management in TM+.

• Anticipate potential barriers, draft issues, and design action plans and recommendations to address the concerns while helping the team improve rigor and discipline on critical processes.

• Present audit findings and internal control deficiencies to management along with recommendations for corrective action and process improvements.

SOX / FDICIA

• Conduct annual tests of ITGCs over financial reporting required under SOX Section 404 and the FDIC Improvement Act (FDICIA).

• Ensure quality of work product subject to review by regulators and reliance on the part of the external auditors.

• Present a complete analysis of internal control deficiencies, identify compensating controls, and track remediation efforts

Communication and Team Member Development

• Partner with key business stakeholders to enhance understanding of the business processes and clearly communicate identified risks and recommendations.

• Develop long-term business relationships by acting as a trusted advisor through the sharing of business knowledge, identifying root causes, and recommending efficient, effective, and sustainable solutions.

• Counsel and develop team members to maximize morale, engagement, and productivity. Identify areas for growth and provide coaching and training as needed.

Special Projects

• Provide thought leadership around the use of data analytics and automation to enhance audit efficiencies.

• Advance the department’s maturity in the auditing of general IT controls and the use of various automation tools. 

• Represent Internal Audits on organizational and global project teams and conduct special audits, investigations, and/or ad hoc projects as needed.

What you bring

• Bachelor’s degree in Information Systems, Computer Science, Accounting, Finance, or a related field, or equivalent years of experience.

• Professional certifications (CIA, CISA, CISM, CISSP, etc.).

• 7+ years of relevant work experience in a similar field and/or industry.

• 2+ years of IT audit management experience.

• Expertise in conducting IT compliance audits:

  • SOX

  • GLBA

  • FFIEC

  • PCI DSS

  • GDPR

  • CCPA/CPRA

  • NYDFS

• Expertise in conducting IT audits using industry-standard frameworks:

  • NIST CSF

  • NIST SP 800-53

  • ISO 27001/27002

  • COSO

  • ITIL

• Expertise includes knowledge of desktop applications, distributed platforms, operating systems, databases, network systems, web-based technology, infrastructure, and IT security tools and techniques.  Various technologies exposure and familiarity with the IT environment.

Added bonus if you have

• MBA / Advanced degree or training in Computer Science, Data Science, Cybersecurity, or related discipline. 

• Experience working with TeamMate+ audit software.

• Experience revising audit methodologies.

What we’ll bring

During your interview process, our team can fill you in on all the details of our industry-leading benefits and career development opportunities. A few highlights include:

• A work environment built on teamwork, flexibility and respect

• Professional growth and development programs to help advance your career, as well as tuition reimbursement

• Team Member Vehicle Purchase Discount

• Toyota Team Member Lease Vehicle Program (if applicable)

• Comprehensive health care and wellness plans for your entire family

• Toyota 401(k) Savings Plan featuring a company match, as well as an annual retirement contribution from Toyota regardless of whether you contribute (if applicable)

• Paid holidays and paid time off

• Referral services related to prenatal services, adoption, childcare, schools and more

• Tax Advantaged Accounts (Health Savings Account, Health Care FSA, Dependent Care FSA)

• Relocation assistance (if applicable)

Belonging at Toyota

Our success begins and ends with our people. We embrace all perspectives and value unique human experiences. Respect for all is our North Star.

Applicants for our positions are considered without regard to race, ethnicity, national origin, sex, sexual orientation, gender identity or expression, age, disability, religion, military or veteran status, or any other characteristics protected by law.

Have a question, need assistance with your application or do you require any special accommodations? Please send an email to [email protected].