At Precision Castparts (PCC), we make extraordinary products for aerospace and other industries. This is made possible by the hard work and creativity of a diverse and global workforce. We are committed to fostering a culture of inclusiveness, empowerment and respect that embraces the differences in who we are. Working together, we will continue to solve complex problems every day.
We are relentless in our dedication to being a high-quality and on-time producer, delivering the highest value to our customers while continually pursuing strategic, profitable growth.
PCC employs more than 20,000 people worldwide in over 120 plants spread across twenty-six states in the US and over a dozen countries.
The Senior Manager, IT Internal Audit and SOX will lead the company-wide information technology (“IT”) internal audit (“IA”) and Sarbanes Oxley compliance (“SOX”) program. The individual will lead a co-source IA IT audit team in performing risk-based audits across the company, be a strategic and trusted advisor by applying technical skills and mastery in IT controls and system implementations, identify and drive change in IT controls and audit procedures, develop and report on key performance indicators and administer a company-wide application.
Primary Responsibilities and Areas of Involvement
- Lead co-source IA IT audit team in executing annual IT audit plan, including system implementation, IT control and relevant IT framework audits, as well as advisory process assessments
- Manage IT control design, implementation, execution, testing, monitoring and reporting, including enterprise resource planning, human resources, payroll and other business applications, operating systems, databases, cloud applications, data governance, data privacy, cybersecurity, business continuity/disaster recovery and emerging risks
- Manage IT policy adherence and IT control updates for IT system implementations
- Stay up to date on changes to systems and applications across the organization
- Lead annual IT control risk assessment
- Lead monthly IT control update meetings with division leadership
- Lead annual third-party service provider analysis
- Lead system administration for Saviynt user access and segregation of duties cloud application
- Support continuous improvement initiatives and pursue process simplification and standardization to improve the overall control environment, reduce risk and improve efficiency
- Provide guidance and training for personnel regarding IT risks, processes, controls, control assessments and control deficiency root cause analysis and remediation
- Build and maintain strong relationships with corporate, division and operation IT leadership, management and staff
- Collaborate with external IT auditors
- Other job duties as required
Knowledge, Skills & Abilities:
- 10+ years of professional experience in IT, risk and/or audit
- Experience in a public, global, multi-operation, process-driven manufacturing environment with a mix of enterprise, decentralized and integrated applications
- In-depth knowledge of IT controls and SOX requirements, including understanding of business process flows in a typical manufacturing entity
- Proven interpersonal and cross functional business partnering skills that allow for effective collaboration on projects to achieve timely results
- Strong communication, planning and organizational abilities
- Creative, analytical problem solver with bias for action
- BS required, professional certification desirable
All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.
This position requires use of information or access to production processes subject to national security controls under U.S. export control laws and regulations (including, but not limited to the International Traffic in Arms Regulations (ITAR) and the Export Administration Regulations (EAR)). To be qualified to work in this facility, a successful applicant must be a U.S. Person, as defined in those regulations, and able to supply evidence of that qualification prior to starting work or be authorized to receive controlled information under a specific license or permission from the relevant government agency. The U.S. export control regulations define a U.S. person as a U.S. Citizen, U.S. National, U.S. Permanent Resident (i.e. &39;Green Card Holder&39;), and certain categories of Asylees and Refugees.