Consultant, Internal Audit

Celestica is the brand behind the brands you love in cutting-edge technology solutions partnering with some of the worlds largest companies across diverse sectors like tech enterprise communications automotive aerospace & defense HealthTech industrial & smart energy capital equipment consumer and robotics. Within this high-tech global landscape our leadership relies on IT Internal Audit to objectively evaluate risk management controls and provide value-added recommendations that maintain our world-class standards. As the Consultant Internal Audit IT you apply your expertise in IT systems and infrastructure to ensure the adequacy and reliability of internal controls. You tackle problems requiring evaluation of data and security factors to minimize risk exposure. Operating as a Level 10 leader you have the autonomy to deliver on team goals influence management on significant technology issues and resolve conflicts with tact and diplomacy across our global operations in the Americas Europe and Asia.

• Strategic IT Audit Leadership: Lead and conduct comprehensive IT audits and reviews of systems applications and IT processes. You are responsible for audits involving new acquisitions and the implementation of emerging technology audits with no prior history or background.
• Security & Infrastructure Oversight: Conduct IT security audits across applications (ERP/SAP Shop-floor Quality systems) networks operating systems and databases. You evaluate security vulnerabilities and coordinate audit scopes with business units and external security experts. You will also lead assessments of NIST SP 800-171 and Cybersecurity Maturity Model Certification (CMMC) compliance.
• Risk Management Advisory: Provide IT management with guidance on IT risk management specifically regarding application and infrastructure security. You design risk and control matrices based on evaluations of underlying business risks.
• SOX & Compliance Testing: Perform and review SOX effectiveness testing of IT key controls. You oversee the testing of IT General Controls (ITGC) application controls and key reports identified during the walkthrough process.
• Systems Implementation Reviews: Perform pre- and post-implementation reviews of major system enhancements or new global deployments to ensure control integrity from the design phase through to go-live.
• Stakeholder & Relationship Management: Interface with senior managers on issues related to your area of IT expertise. You coordinate with management to formulate action plans and lead follow-up activities to verify the resolution of identified deficiencies.
• Annual Audit Planning: Participate in the formulation of the annual audit plan defining the scope purpose and objectives of IT-specific audits. You act as a liaison to outsourced internal auditors and provide IT support to operational auditors.
• Liaison & Influence: Interact with and influence management on significant IT and security issues ensuring that cost-effective solutions are implemented to improve controls and enhance business operations.

The ideal candidate for this role will have:

• IT Control Knowledge: Experience in IT General Controls (ITGC) related to logical/physical security change management business continuity and network layers.
• Technical Infrastructure Knowledge: Understanding of complex IT infrastructures including cloud-based solutions (Google Cloud Azure and AWS platforms) and networking (firewalls routers active directory).
• Information Security Expertise: Knowledge of security standards (ISO-27000 series) frameworks (COBIT NIST COSO) and the current enterprise threat landscape as it relates to global manufacturing.
• ERP Proficiency: Experience auditing SAP or similar integrated business applications and their interfaces is a plus.
• Analytical Problem Solving: Ability to evaluate diverse factors and build business cases to provide high-impact recommendations to senior leadership.
• Communication & Diplomacy: Ability to communicate findings to busy auditees and management with tact ensuring a collaborative approach to remediation.

• Bachelors degree in Computer Science Information Systems Business Administration or Accounting is required.
• CISA (Certified Information Systems Auditor) or CISSP (Certified Information Systems Security Professional) designation is required.

• Typically requires 6-8 years of applicable experience in IT audit information security or IT risk management preferably within a global manufacturing environment.
• Experience conducting cybersecurity assessments audits or compliance evaluations
• Working knowledge of NIST SP 800-171 CMMC 2.0 framework and related DoD cybersecurity policy
• Familiarity with cloud environments (e.g. GovCloud Microsoft 365 GCC/GCC High) and their CMMC implications
• Proven track record of managing or supporting IT audits and providing recommendations to senior leadership.

This job description is not intended to be an exhaustive list of all duties and responsibilities of the position. Employees are held accountable for all duties of the job. Job duties and the % of time identified for any function are subject to change at any time.