Job Posting Template s3

Veritiv Corp. *Position Title: Principal IT Auditor *Location: Sandy Springs, GA

*Position Type: Full-Time - Permanent *Compensation: Salaried *Start Date: ASAP

ISACA Atlanta is not responsible for the content or accuracy of this job posting.

*JOB DESCRIPTION Principal IT Auditor

POSITION SUMMARY: Applies best practice and leading-edge audit techniques to planning and implementation activities over IT related assurance projects as assigned by the Senior Manager of Internal Audit (Information Systems). Responsible for executing audits of information systems and related processes in a complex multi-platform IT environment. Identifies IT risks across all divisions and business functions. Recommends practical, appropriate, and cost effective methods to reduce identified risk exposures and increase the strength of the overall control environment. Delivers high quality reports and presentations to management to raise the level of control awareness throughout Veritiv. This position requires knowledge of auditing principles, auditing standards, IIA standards, PCAOB, and Sarbanes-Oxley (SOX) requirements. In particular, this individual will be responsible for providing internal audit services and support in the following areas:

 Information technology and information security  System implementations, notably financial systems  Continuous Controls Monitoring and Continuous Auditing  Sarbanes Oxley (SOX) ITGCs  Auditing of Application controls across multiple IT systems  Managing and tracking audit findings and their remediation efforts

MAJOR JOB RESPONSIBILITIES:  Plan and execute multiple concurrent IT audits and IT assurance projects, including reviews of existing production applications, systems currently being developed, and specialized technological components and, in doing so, manage the audit timelines. The scope of each audit includes (but not limited) to the following:

o Reviewing complex computer applications and hardware platforms to ensure efficient and sound control practices are in place to properly control the area being reviewed; o Reviewing and appraising the soundness, adequacy, and application of information systems, accounting, financial, and other operating controls and promoting effective control at reasonable cost; o Ascertaining the extent of compliance with established policies, plans, and procedures; o Ascertaining the extent to which company assets are accounted for and safeguarded from losses of all kinds including the investigation of all instances of Corporate embezzlement and fraud; o Appraising the quality of performance of operating personnel in carrying out their assigned responsibilities; and o Making recommendations on methods to improve controls and effectiveness.  Review, analyze and test internal control systems to ensure compliance with SOX legislation.  Provide advice and guidance to management personnel related to the development of new or modified controls.  Serve as representative of Internal Audit team on corporate projects and provide input on internal controls consistent with industry best practice.  Interface with external auditors to facilitate the delivery and analysis of audit information and results.  Work with the IT department personnel to recommend and prioritize new process to establish best practice

ISACA Atlanta Job Posting Form – Template Version 1.2: 03/23/04 Page #1 benchmarks.  Develop overall assessments around system-related risks and controls (both business and technical) and provide advice to management regarding mitigation of these risks.  Assessment, management and execution of select projects related to business-area or IT audit remediation.  Prepare high quality audit work papers and other supporting data covering audit findings; evaluate findings and formulates sound, logical conclusions on basis of available facts. Ensure audit work performed conforms to the Information Systems Audit and Control Association and Institute of Internal Auditors standards.  Continuously keep Senior Manager of Internal Audit (Information Systems) informed of progress, problems, and findings as it relates to their areas of responsibilities and ongoing projects.

JOB REQUIREMENTS/ KNOWLEDGE, SKILLS AND ABILITIES:  Understanding of the COBIT Internal Control Framework.  Strong critical thinking and analytical skills.  Strong computer application skills, including Microsoft Office products.  Strong written and oral communication skills.  Must be self-motivated and possess excellent interpersonal skills.  Experience with automated audit software preferred such as ACL.  Must have excellent teamwork and collaboration skills  Proficiency in auditing multiple ERPs and Information System platforms such as Oracle Financials, IBM mainframes, Unix, AS/400, etc

*JOB REQUIREMENTS Please provide a description of skill sets and other qualification necessary for applicants. Travel:  Estimated travel of 10% to 20% to key organizational locations. Education:  Bachelors Degree in Information Systems or other IT related field Experience: 4 - 6 years experience in progressive business background including but not limited to experience in the following areas:

 Public Accounting  Information Systems Auditing/Assurance Certification:  CISA required  CISM or CISSP preferred

COMPANY INFORMATION VERITIV™ CORPORATION is a full-service strategic distribution company offering business-to-business solutions including packaging, print and paper, publishing, facility solutions, and logistics.

VERITIV is an Equal Opportunity/Affirmative Action employer. Individuals seeking employment are considered without regards to race, ethnicity, color, creed, religion, sex, sexual orientation, marital status, age, disability, gender identity or expression, genetic information, national origin, protected veteran status or any other

CONTACT INFORMATION Job Reference: R10448 *Contact Name: Cheryl Rougier *Method: [email protected] Website: http://veritivcorp.jobs/sandy-springs-ga/principal-it- auditor/021D5D58A62F48F59DEEEEBB5D20E5F6/job/ SPECIAL INTRUCTIONS: Go to the link above and apply directly to the website.

ISACA Atlanta Job Posting Form – Template Version 1.2: 03/23/04 Page #2