Summary of Principle Functions:
The mission of Cleveland-Cliffs Inc. ("Cliffs" or "the Company") Internal Audit Department is to serve the Audit Committee of the Board of Directors and management as an independent and objective assurance and consulting function designed to add value and improve the Company's operations. It assists the Company in accomplishing its objectives by bringing a systematic and disciplined approach to evaluate and improve the effectiveness of the organization's governance, risk management, and internal control. The primary objectives of the Department's function are to create an audit plan focused on areas of greatest risk to the Company and to provide value-add advisory and assurance services. The Department achieves these objectives through continued evaluation of organizational and emerging risks, real-time participation in Company initiatives and projects and participation in risk management activities.
The Senior IT Auditor will report to the Senior Manager IT Audit, with exposure to senior leadership within the Internal Audit Department.
This role is responsible for executing IT audits, the results of which will help the business manage strategic risks, improve or develop efficient and effective processes, identify and communicate best practices and foster appropriate control levels for IT, business and financial risks.
Specific Responsibilities/Essential Functions:
Participate in the annual SOX risk assessment, mapping IT assets and technologies to key financial processes and controls.
Support the design and execute tests of controls, including the review of testing of other team members, used to evaluate the operating effectiveness of IT General Controls within SOX scope.
Foster a team-oriented environment and provide leadership for junior team members.
Evaluate and documents process, system and control effectiveness through the application of information technology, auditing and business knowledge; collect, analyze, and document information to support audit results.
Partner with management to identify constructive and value-added solutions to address issues identified. Recommend operational improvements which ensure that proper controls are exercised over all aspects of the information systems and that company assets are conserved, protected and accurately presented.
Assess the overall significance of the control deficiencies identified during the audit. Provide perspective for evaluating the audit deficiencies against evolving industry best practices.
Monitor status of action plans arising from audits.
Coordinate/complete special requests, projects and reports as directed by Internal Audit Management.
Maintain the confidentiality of audit findings and Company proprietary information.
Develop and maintain effective working relationships with Internal Audit's stakeholders.
Conduct work in accordance with the Standards for the Professional Practice of Internal Auditing and Code of Ethics promulgated by the Institute of Internal Auditors.
Participate in the continuous improvement of the Internal Audit Department, including providing training and feedback related to audit activities.
Support company-wide initiatives, such as sustainability practices, enterprise risk management programs, and other projects at the Company.
Design and execute non-SOX IT audits in areas of cyber security, data governance, and cloud security, amongst others.
Bachelors in Information Technology, Information Systems, Business Administration, or related field. Certified Information Systems Auditor (CISA), Certified Internal Auditor (CIA) or equivalent certification preferred.
Standing membership to the Information Systems Audit and Control Association (ISACA) is preferred.
Minimum of 3-5 years of professional experience, preferably including internal audit or public accounting experience. Auditing work experience is preferred; however, business/operations experience may be deemed adequate.
Excellent written and oral communication skills, strong organizational and analytical skills, and project management experience
Managerial courage to confront difficult issues with the appropriate response and to do so in a timely manner with any/all stakeholders
Comprehensive knowledge of the Sarbanes-Oxley Act provisions and methodologies for achieving compliance
Understanding of both Control Objectives for Information and related Technology (COBIT) and general auditing (GAAS) principals
Strong interpersonal skills - ability to work closely with people at all levels of the organization
Proactive - demonstrated ability and desire to improve individual performance and advance the efficiency and effectiveness of the department
Ability to work in a highly complex environment under general direction as to assignment
Ability to solve conflict between differing priorities of various process stakeholders by offering pragmatic solutions to management
Ability to maintain the highest level of ethics, integrity and objectivity
Ability to travel up to 30% to Cleveland-Cliffs locations as required
Data analytics and continuous auditing (RPA) exp
We are an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, age, national origin, sexual orientation, gender identity, genetic information, disability, military or protected veteran status. The following links provide information regarding your Equal Employment Opportunity rights and protections: EEO is the Law & EEO is the Law Supplement. We are a drug-free workplace and conduct pre-employment testing as a condition of employment.