Senior IT SOX/Operational Auditor

Senior IT SOX/Operational Auditor

Non-Union Position

Internal Audit; Portland, Oregon (US-OR)

Regular FT, Exempt

Posting # 5487

About Us:

At NW Natural, we offer more than rewarding career opportunities and a vibrant, inclusive work culture. We invite you to join us in providing safe and reliable utility services and renewable energy to better the lives of the communities we serve. Our vision is to be the leader in service excellence, innovation and environmental stewardship for our customers, while building on our strengths as a trusted energy provider and environmental leader for our industry.

In addition to environmental stewardship, we’re also deeply committed to Diversity, Equity and Inclusion at NW Natural. Our DEI Council started 21 years ago, and today we continue to foster a culture where all employees can experience a sense of belonging, shared purpose and possibility.

NOTE:

The successful candidate may work from any location where the company is authorized to do business, subject to applicable state and local laws. At this time, we can only consider remote applicants who live and work in the following states: Oregon, Washington, Texas, Arizona, Florida, Idaho, Michigan, and Nevada.

The Role:

This position requires a candidate who is experienced at defining, leading and executing on the annual IT SOX Audit Plan, specifically the annual assessment of the design and effectiveness of the company’s key IT SOX controls and testing of key reports which support internal controls over financial reporting. With regard to the annual IT SOX testing, this position will be responsible for independently and pro-actively managing relationships with key business partners consisting of the Company’s business controls office, the Company’s IT compliance office, and the Company’s external auditors relative to the execution of IT SOX testing, while ensuring alignment with both management’s and the external auditor’s expectations. In addition, this position will be responsible for flexibly supporting IT operational audits and other related deliverables as a key member of the internal audit team.

Day to Day:

- Lead the development and execution of the annual IT SOX Audit Plan

- Execute and report on IT SOX testing, including testing of IT general controls, automated application controls, and key reports

- Plan, lead, perform, and document control walkthroughs to evaluate the design of IT general controls

- Evaluate the operating effectiveness of key IT SOX general controls and automated application controls through testing

- Perform baseline and benchmark testing of key SOX-relevant reports

- Develop detailed test steps and audit procedures for testing new IT general controls, automated application controls, and key reports

- Apply appropriate test procedures to existing IT SOX controls and reports to ensure key control attributes are adequately addressed

- Document SOX testing work thoroughly and accurately, providing high-quality audit evidence to support conclusions and facilitate efficient review

- Execute test work in compliance with external audit expectations to maximize reliance on internal SOX testing

- Drive cross-functional stakeholder engagement to ensure successful execution of, and alignment with, the annual IT SOX testing plan

- Identify, discuss, and validate potential control exceptions (e.g., SOX deficiencies and process improvement opportunities) in real time with key stakeholders in a professional and constructive manner

- Project manage IT SOX audit activities, ensuring timely execution, achievement of testing deadlines, and regular status reporting to stakeholders

Additional responsibilities include:

- Support the IT Audit Program Manager and audit team by leading and performing IT operational audits, including:

- Developing risk-based IT audit scopes

- Leading, conducting, and documenting walkthroughs

- Developing, executing, and documenting audit testing procedures

- Drafting audit findings, developing practical recommendations, and proposing remediation actions

- Support internal and external audit activities related to the year-end financial statement audit by delivering required audit documentation and analyses

- Contribute to overall team effectiveness by performing additional responsibilities as assigned in support of departmental objectives and the annual audit plan

Come on your first day with:

- Bachelor’s degree in Information Systems, Computer Science, Accounting, or a related field

- Certified Information Systems Auditor (CISA) certification required; public accounting experience preferred

- Minimum of five (5) years of experience performing IT SOX audits

- Experience developing test work programs for new SOX controls, including both manual and automated controls

- Experience performing baseline and benchmark testing of key reports supporting internal controls over financial reporting

- Demonstrated ability to work independently, showing self-motivation and effective self-management with limited oversight

- Problem-solving skills and the ability to manage effectively through ambiguity

- Excellent organizational, project management, and time management skills, including the ability to multitask and meet deadlines

- Proven ability to document work in accordance with external auditor expectations, with strong attention to detail

- Experience scoping and executing IT operational audits, from planning, risk assessment, and scoping through reporting

- Experience assessing and implementing controls aligned with the NIST Cybersecurity Framework (CSF)

- Experience performing risk and control assessments using NIST framework guidance

- Experience implementing and evaluating controls aligned with the NIST framework

- Experience conducting IT risk assessments using COBIT risk guidance and mapping risks to COBIT control objectives

- Collaborative and flexible team-oriented mindset

- Exceptional written and verbal communication skills, including the ability to synthesize and clearly communicate technical information

- Experience with SAP, data analytics tools, and AuditBoard preferred

- Proficiency with Microsoft Office applications, including Excel, PowerPoint, and Word

What we offer:

Health & Wellness –

- Rich health insurance benefits with competitive employer contribution

- Free access to an online wellness resources platform

Work Life Balance -

- Up to 23 Vacation Days

- 80 Hours of Sick Time

- 10 paid holidays and 3 floating holidays

- Flexible work arrangements

- 3 weeks paid parental leave

- Green Team / Diversity, Equity & Inclusion Council / Safety Team / Women’s Network and many other Employee Resource Groups

- 1500 sq foot exercise facility and secure bike room

Financial -

- Meaningful annual incentive bonus opportunity in addition to base salary

- Competitive 401K company contribution and match

- 15% discount on NW Natural stock through Employee Stock Purchase Program

- Up to $5250 a year in tuition reimbursement

- Wellness incentive program

Discounts -

- 20% off natural gas service

- Up to 30% discount at NW Natural Appliance Center

- TriMet Pass for all HQ employees

- Generous discounts with Verizon & AT&T Wireless

Base salary range:

$98,450.00 - $140,300.00 per year, depending on qualifications

Annual Target Incentive:

Grade 21, 9.5% target

Targets are calculated using eligible earnings during plan year participation. Payout, if earned, is based on company and individual performance for each plan year and may range from 0% – 200% of target. Targets are subject to change in subsequent plan years. Must be employed by September 30 in order to receive any prorated payout.

Application Process:

To be considered for this position, submit a complete electronic application including cover letter and resume via our website.

https://www.nwnatural.com/about-us/the-company/careers

Deadline:

5/10/26

Disclosure: We are a drug free workplace and we comply with Federal Drug Free Workplace Act and Department of Transportation regulations. NW Natural participates in E-Verify. Individuals hired will have their Form I-9 information submitted to E-Verify. E-Verify is an Internet-based system that compares information from an employee’s Form I-9, Employment Eligibility Verification, to data from U.S. Department of Homeland Security and Social Security Administration records to confirm employment eligibility.

E-Verify Information

NW Natural participates in E-Verify. Individuals hired will have their Form I-9 information submitted to E-Verify. E-Verify is an Internet-based system that compares information from an employee’s Form I-9, Employment Eligibility Verification, to data from U.S. Department of Homeland Security and Social Security Administration records to confirm employment eligibility.

All applications must be submitted through NW Natural’s Electronic Application System. Resumes submitted via email, fax or mail will not be accepted in lieu of an electronic application.

NW Natural is proud to be an equal opportunity employer. We welcome and embrace our candidates’ diversity and take affirmative action to employ and advance individuals without discrimination on the basis of race, color, sex, gender identity or expression, sexual orientation, religion, age, physical or mental disability, veteran status, pregnancy (including childbirth or related medical conditions), national origin, marital status, genetic information, and all other legally protected characteristics. We forbid discrimination and harassment in the workplace based on any protected status or characteristic. A criminal history is not an automatic bar to employment with NW Natural. Instead, we make individualized assessments regarding qualifications and backgrounds. NW Natural is also committed to providing reasonable accommodations for individuals with disabilities, individuals with sincerely held religious beliefs, and disabled veterans in our job application procedures. If you need assistance or an accommodation as part of the application process, please contact us at employment@nwnatural.com or (971) 979-6341.