Senior Auditor, Digital

About the Company

Responsibilities

• ● Serve as 2nd line of defense for Worley Digital.
• ● Conduct control assessments independently to evaluate compliance with the Worley Security Framework and COBIT, with a strong emphasis on security controls, aligning with external security standards including NIST CSF, ISO 27001, and the ACSC Essential Eight.
• ● Promote greater awareness and enhance the maturity of the control environment among first-line control owners.
• ● Deliver practical and actionable recommendations to address identified control gaps.
• ● Collaborate with cross-functional teams to support control owners in developing and implementing effective remediation plans.
• ● Deliver monthly reports on the status and outcomes of the control assessment program.
• ● Coordinate activities and maintain effective communication between Quality Assurance, Internal Audit, external certification bodies, and external auditors.
• ● Support with meeting customer-specific information security compliance obligations, including audit facilitation, certifications, and assessment responses.
• ● Support with assessment and information security risk management related to Worley suppliers.

Requirements

• ● A relevant bachelor's degree.
• ● Certifications such as - CIA, CISA, CRISC, CISSP
• ● 5 + years of experience in information systems audit, preferably IS assurance with a professional services firm or IT internal audit.
• ● Demonstrated ability to partner and collaborate effectively with stakeholders, demonstrating an appreciation of both IT and business strategy. Advanced awareness of full technology stack.
• ● Demonstrated ability to identify material information security control weaknesses and recommend pragmatic remediation action plans, while managing potentially contentious situations.
• ● Exceptional attention to detail, with the aptitude to collect, analyze and conclude on data.
• ● Demonstrated ability to produce clear, concise, and logical audit working papers and audit reports.
• ● Operational knowledge of data handling and confidentiality.
• ● Ability to work in a fast-paced unstructured customer-centric environment across multiple geographies and operational contexts.
• ● Knowledge of frameworks including ITIL, COBIT, NIST CSF (Cyber Security Framework), Essential 8 and ISO27001.
• ● Advanced user in MS Office applications (including MS Visio) and MS SharePoint
• ● Advanced awareness of full technology stack.
• ● Interpersonal: Builds appropriate, constructive, and effective business relationships throughout the organization; uses diplomacy and tact; is approachable; communicates clearly, accurately, and consistently both verbally and in written matters. Employs the principles of active listening and encourages feedback from others.
• ● Teamwork: Enjoys working in a small high caliber team with high visibility to senior stakeholders. Able to work and liaise with multiple teams and stakeholders, able to prioritize workloads and help other team members to achieve team goals.
• ● Action Orientation: Achieves results set by self and others, meets timelines, pushes to achieve stretch goals, and demonstrates enthusiasm, persistence, and tenacity. Breaks down work into executable tasks.
• ● Intellectual Capacity - Deals with new concepts and complexity comfortably. Examines problems carefully and thoroughly and understands their interdependencies. Can pull information and ideas from many sources and see the importance of many factors.
• ● This is a global role and will require flexibility to work across multiple time zones.
• ● Flexible work arrangements.
• ● Take advantage of our global on-line learning platform
• ● Competitive remuneration & employee benefits.
• ● Enjoy a varied & challenging role.
• ● Career development opportunities beyond this role.