Compliance Auditor
Title: Internal Auditor
General Description:
The Internal Auditor is responsible for conducting internal audits, risk assessments, and readiness reviews across Merrill’s business and product verticals in support of existing and developing information security, compliance, and data privacy programs.
The Internal Auditor will report to the Audit & Compliance Program Manager and be required to collaborate across diverse business teams and skill-sets in order to facilitate the ongoing maturation of internal security control structures.
Major Job Responsibilities:
The Internal Auditor will be expected to manage and execute day-to-day responsibilities related to performing internal audit work in a professional manner. Expectations include:
Research, interpret, develop, maintain, and apply compliance regulations and control objectives for various compliance program requirements including ISO 27001, HIPAA and PCI
Execute on all aspects of audit activities including planning, preparation, field work, audit reports, and follow-up activities
Participate with the business as a consultant in risk mitigation sessions to ensure appropriate design of controls and that all legal, contractual and regulatory risks are identified and mitigated appropriately
Evaluate corrective action plans and provide consultative support as to the interpretation of regulations and their implementation
Develop and maintain effective working relationships with business unit associates and management, as well as Security and Compliance associates
Requirements:
Job Requirements:
4 year college degree in a MIS related field or equivalent experience
4+ years of internal or external audit experience
2+ years of experience in supporting ISO 27001, HIPAA and/or PCI compliance activities
Professional certifications such as CISA, CISSP or CIA preferred
In-depth knowledge of auditing practices, including risk assessment and internal audit standards
Experience in collaborating and influencing across diverse business teams and skill-sets
Ability to define, implement, track, and audit control measurements
Ability to develop, document and revise system design procedures, test procedures, and information security standards
Strong verbal, written, and interpersonal communication skills
Strong client service orientation and self-directed
Up to 5% travel
