Services Delivery Program Manager - IT Audit

Job Locations

US-NC-Cary HQ

Requisition ID

20038816

Category

Contracts/Legal

Visa Sponsorship

No

Travel Requirements

None

As an IT Auditor, you will help conduct audits to ensure internal controls are in place that align with various regulations (which may include ISO 27001, PCI, FISMA, IRS 1075, and NIST 800-53) as well as the policies and procedures set forth by SAS. A secondary focus is to operate in a compliance role and facilitating remediation of continuous improvement efforts across the business.

Your responsibilities may include:
Assist with internal audits by:
- Benchmarking of security policies against best practices and standards, which may include ISO 27001, PCI, FISMA, IRS 1075, and NIST 800-53.
- Creating and executing on audit test cases
- Developing and presenting Audit Reports
- Use the ServiceNow GRC tool to create and manage continuous monitoring indicators, build reporting dashboards, and document electronic work papers
- Perform issue remediation tasks such as analysis, documentation, follow-up and retesting in response to audit findings.
- Operate as a consultant, researching and recommending changes to enhance or streamline quality and information security procedures, including internal and external auditing.
- Review hosting, security, and audit contract terms and ensure compliance to current policies and processes.
- Help maintain the IT and security policy and process development and updates, while ensuring compliance with regulatory regulations and guidance.
- Coordinate response to complete RFP and security questionnaires.
- Must have the ability to work with little supervision, escalating issues, as appropriate.
- Perform other duties, as assigned.
Location
- Cary, NC only
Essential Qualifications
- Bachelor's degree in Business, IT, Computer Science or related field
- 4-6 years of experience in an audit, compliance, risk or governance role
- Knowledge of IT, project management, compliance or quality auditor procedures and tools (not financial/accounting)
Essential Equivalent (Education)
- Associate's degree plus 3-4 years of the stated essential requirements; ~OR~
- High School (GED) diploma plus 4-6 years of the stated essential requirements
Additional / Preferences
- Understanding of Active Directory and access control
- Understanding of best practices for information security and data privacy
- Knowledge and experience with best practices /standards: ISO 27001, ITIL, or COBIT
- Understanding of regulatory standards: PCI, FISMA/NIST 800-53, or IRS 1075
- Experience with ServiceNow issue management ticketing system (Preferably GRC)
- Auditor certification, such as CISA or CQA, or equivalent professional training
- SAS software implementation experience or prior implementation experience
- IT hosting experience
Equivalency:
- Equivalent combination of education, training, and relevant experience may be considered in place of the requirements stated above.
- The level of this position will be determined based on the applicant's education, skills and experience.

Why SAS
- We're the leader in analytics. Through our software and services, we inspire customers around the world to transform data into intelligence. Our curiosity fuels innovation, pushing boundaries, challenging the status quo and changing the way we live.
- We love living the #saslife and believe that happy, healthy people have a passion for life, and bring that energy to work. No matter what your specialty or where you are in the world, your unique contributions will make a difference. Our multi-dimensional culture blends our different backgrounds, experiences, and perspectives. Here, it isn't about fitting into our culture, it's about adding to it - and we can't wait to see what you'll bring.
- SAS looks not only for the right skills, but also for a cultural fit. We seek colleagues who will contribute to the unique culture that makes SAS such a great place to work. We look for the total candidate: technical skills, culture fit, relationship skills, problem solvers, good communicators and, of course, innovators. Candidates must be ready to make an impact.

Additional Information:
To qualify, applicants must be legally authorized to work in the United States, and should not require, now or in the future, sponsorship for employment visa status. SAS is an equal opportunity employer. All qualified applicants are considered for employment without regard to race, color, religion, gender, sexual orientation, gender identity, age, national origin, disability status, protected veteran status or any other characteristic protected by law. Read more: Equal Employment Opportunity is the Law. Also view the supplement EEO is the Law, and the Pay Transparency notice.

Equivalent combination of education, training and experience may be considered in place of the above qualifications. The level of this position will be determined based on the applicant's education, skills and experience. Resumes may be considered in the order they are received. SAS employees performing certain job functions may require access to technology or software subject to export or import regulations. To comply with these regulations, SAS may obtain nationality or citizenship information from applicants for employment. SAS collects this information solely for trade law compliance purposes and does not use it to discriminate unfairly in the hiring process.

Want to stay up to date with life at SAS, products and jobs? Follow us on LinkedIn

All valid SAS job openings are located on the Careers page at www.sas.com. SAS only sends emails from verified 'sas.com' email addresses and never asks for sensitive, personal information or money. Should you have any doubts about the authenticity of any type of communication from for, or on behalf of SAS, please contact us at Recruitingsupport@sas.com before taking any further action.

.