Senior Internal IT Auditor

Who we are...

Verra Mobility is a global leader in smart mobility. We develop technology-enabled solutions that help the world move safely and easily. We are fostering the development of safe cities, working with police departments and municipalities to install over 4,000 red-light, speed, and school bus stop arm safety cameras across North America. We are also creating smart roadways, serving the world's largest commercial fleets and rental car companies to manage tolling transactions and violations for over 8.5 million vehicles. And we are a leading provider of connected systems, processing nearly 165 million transactions each year across 50 individual tolling authorities. 

Culture 

Verra Mobility Corporation is a rapidly-growing, entrepreneurial company that operates with a people-first philosophy and approach. The company lives by its core values—Do What’s Right, Lead with Grace, Win Together, and Own It—in everything it does for its customers and team members. The company seeks to grow aggressively, both organically and through acquisition, to continue to be the undisputed market leader with these five core competencies: bias for action, customer focus, teamwork, drive for results, and commitment to excellence.

Position Overview:

The Information Technology Audit team is responsible for providing the specialized IT audit skills required to assess and evaluate controls over Verra Mobility’s corporate-wide systems infrastructure environment and system development efforts. The Sr. IT Audit Analyst works on an agile audit team evaluating risks and controls, executing audit reviews, communicating issues and findings to management, devising solutions for business improvements, and following-up on corrective actions. The Sr. IT Audit Analyst will need to work effectively in a team setting. The IT Audit group may perform audits of Verra Mobility’s applications, third-party vendors, data centers, network and IT infrastructure, firewall and perimeter security, mobile security, disaster recovery, change and configuration management, and incident handling. Agile audits may also include pre-implementation or post-implementation evaluation of new or current applications.

This Mission Is Accomplished Through

• Assessing the adequacy and effectiveness of controls, risk management, compliance, and governance processes
• Reporting on issues and solutions that improve Verra Mobility’s control environment
• Responding to change with a sense of urgency through continuous risk assessment and resource allocation
• Providing audit advisory services on new and changing products and systems
• Developing talented professionals for audit and leadership positions 

Essential Responsibilities:

• Partner with management to facilitate the identification and resolution of risk issues.
• Interview key clients and documenting results.
• Learn and assess security controls for emerging technologies (e.g. AWS, Azure), applications and infrastructure.
• Develop, execute, and document control evaluation procedures.
• Assess Cybersecurity principals and controls at the enterprise level.
• Perform audit work using Agile principles and methodologies.
• Understand the basics of general internal audit practices, tools, techniques, concepts and trends in the technology and financial services industries.
• Participate in cross-enterprise audits supporting both IT and business operations.
• Organize and analyze audit data and summarizing audit findings for manager review.
• Leverage data analytics concepts, principles, methods, and techniques to solve issues and document results.
• Develop automated tools to collect required data for evaluation of applications and systems (e.g. security, configurations, etc.) as applicable.
• Draft audit reports that provide a clear description of issues identified, related implications on the business or enterprise as a whole and recommendations to resolve the issues.
• Build deep working relationships with audit teams and clients located throughout the US and abroad. 

Qualifications:

• BA/BS in Technology, Information Systems, Cybersecurity, Computer Science, Data Science, Accounting or related field of study.
• Professional audit or information security certifications preferred (CISA, CISSP, AWS, SANS GIAC, CIA, ISO certifications, etc.).
• Entry-level cloud computing related certifications preferred.
• 2-5 years of technology work experience (i.e., audit, infosec, network engineering, software development, IT Compliance).
• Strong technical problem solving, research, and analytical skills.
• Team player who takes initiative and works constructively with others to achieve team goals.
• Ability to work on multiple tasks and manage priorities and workload.
• Strong presentation, written, and interpersonal communication skills.
• Knowledge in two or more of the following areas is preferred:
  • Operating Systems (UNIX/Linux, Windows)•    Cloud IaaS Technologies (AWS, Google, Azure)
  • Big Data (Alteryx, Hadoop, Splunk, ELK, PowerBI, Tableu)
  • Network Technologies and Firewalls
  • Database Systems (Oracle, SQL Server)
  • Programming Languages (Python, PowerShell, Java, PL-SQL)
  • Web Application Services (REST API, HTML, XML)
  • Information Security Topics (Identity and Access Management, Cyber, DevSecOps)