Information Systems Auditor

National Grid is hiring an Information Systems Business Auditor to join our Global Internal Audit Team. This hybrid role supports cyber security, Information Systems (IS), AI and technology risk audits across the UK and US, and is based within our Finance team, with location flexibility in Syracuse, NY; Albany, NY; or Brooklyn, NY.

Every day, we deliver safe and secure energy to homes, communities, and businesses. We are there when people need us most, connecting people to the energy they need for the lives they live. As the pace of change in society and our industry accelerates, our expertise and track record position us to help shape the sustainable future of energy.

To be successful, we must anticipate our customers' needs, reduce the cost of energy delivery today, and help pioneer the flexible energy systems of tomorrow. That requires us to deliver on our commitments while continuing to identify opportunities to grow our business and ourselves.

We are seeking an Information Systems Business Auditor with IT and cyber audit experience to join our global Internal Audit team!

Delivering cyber security, Information Systems (IS), Artificial Intelligence (AI) and technology risk audits, you'll assess risks across the UK and US, including cyber security, cloud technologies, AI-enabled solutions, identity and access management, business-critical systems and Critical National Infrastructure environments. As a trusted advisor and influencer, you'll develop strong working relationships across both the business and IS team, breaking down organisational silos and advocating for a more integrated audit approach. As a flexible pragmatist, you'll synthesize and communicate complex audit topics whilst also providing recommendations to support the business and IT in driving continuous improvement of controls and processes to make them more efficient and effective.

Critical areas of focus:

* Executes internal audits, with a focus on agility and innovation for value adding and timely delivery.

* Maintains high quality and timely audit documentation.

* Produces Summary of Issues reports and Draft Audit Reports.

* Tracks and updates status of remediation actions undertaken by the business to address identified risks

* Support Internal Audit's continued evolution in the use of data, automation, and AI-enabled ways of working to enhance audit quality, efficiency, and insight.

Internal Audit execution:

* Deliver audits across a broad range of cyber security and technology risk domains including cloud technologies, identity and access management, artificial intelligence, technology resilience and third-party technology risks.
* Deliver assigned program of audits in line with excellent quality and within allocated time, using professional judgement to set the scope and testing approach to ensure key risks are addressed.
* Proactively look for areas of improvement during the audit process and provide value adding and insightful recommendations that address control and process opportunities/ weaknesses.
* Explore and apply data analytics, automation, and AI-enabled tools responsibly to support audit planning, testing, reporting, issue analysis, and continuous improvement.
* Seamless communication with Senior Business Auditors to avoid surprises and ensure audit progression.
* Produce Summary of issues (SOI) reports and Draft Audit Reports that are well written and effectively communicate the key finding and recommendations of an audit.
* Own and manage a portfolio of audit actions being worked on by business and, on business completion, assess the effectiveness of activities undertaken to address the risks identified.
* Develop and maintain strong and positive relationships with key stakeholders and maintain a thorough knowledge of the business and regulatory environment.

General Responsibilities:
* Must be self-motivated and can handle multiple priorities and work under pressure.
* Proactive and insightful in looking to deliver continuous improvement.
* Competent decision making, problem solving and analytical skills to effectively scope and deliver value adding audits and, drawing out key messages.
* Belief in own judgement and professional capability when communicating issues that have been identified.
* Must be cautious and prudent guardian of sensitive/confidential information.
* Clear communicator with interpersonal and influencing skills to successfully undertake reviews and reach agreement on required changes.
* A flexible pragmatist who understands the group strategy and can help others to understand and achieve changes that help move towards these aims.
* Ability to prepare comprehensive, clear, concise reports; communicate effectively in writing and orally; maintain objectivity and impartiality.

• 3 to 5+ years of experience delivering Information Systems audits, IT audits, cyber security audits, technology risk reviews, or related assurance engagements. Experience within large, complex organizations and/or professional services environments (including Big 4) is beneficial.
• Knowledge of cyber security, technology governance, and risk management frameworks (e.g., NIST, ISO 27001, CIS Controls, COBIT), together with broader risk and controls frameworks.
• Experience delivering Information Systems, cyber security, technology risk, or related audit engagements, including assessing the effectiveness of technology controls, governance processes, risk management activities, and internal control frameworks.
• Experience in one or more of the following areas would be beneficial: cyber security, cloud technologies, identity and access management (IAM), Artificial Intelligence (AI), technology resilience, third-party technology risk, business-critical applications, or Operational Technology (OT) environments.
• Comfortable exploring and using data analytics, automation, and AI-enabled tools responsibly to improve audit quality, efficiency, and insight.
• Demonstrated track record of developing successful, long lasting, relationships across the business including ability to engage, challenge and influence senior managers, deal effectively with resistance to proposals and secure their buy-in and support.
• Knowledge of and experience of business processes, ideally within the utility sector.
• Experience of managing project teams, managing others and projects independently. Project management qualification desirable.
• Highly competent in Microsoft office (e.g., PowerPoint, Excel and Word).
• Knowledge of data analytics (e.g., ACL, PowerBI), process improvement methodologies (Lean/Six Sigma) and auditing software are highly desirable.
• A focus on continued improvement and achieving high standards.
• An undergraduate or graduate degree in a related field (e.g., Accounting, Finance, "STEM" Majors or Business Administration) is expected, but will consider candidates who are qualified through other means / has extensive experience.
• Professionally certified or working towards CISA professional certification is a plus.

This is a hybrid role working ~2days/week from our Brooklyn, NY office.

#LI-NK1 #LI-Internal Audit #LI-cybersecruity #LI-risk #LI-AI #LI-Big 4