Supermicro
Supermicro
Supermicro dezvoltă soluții de calcul de înaltă performanță axate pe tehnologia serverelor și pe infrastructuri avansate pentru aplicații de întreprindere. Activitatea sa se desfășoară în sectorul calculului, combinând inovația hardware cu expertiza operațională necesară pentru susținerea unor medii tehnologice solicitante. Pentru profesioniștii interesați de roluri în ingineria serverelor, calculul pentru întreprinderi, producție, logistică, consultanță și domenii conexe, Supermicro oferă oportunități de a contribui la produse și sisteme utilizate în infrastructura modernă de date.

IT Auditor – Supermicro, San Jose

Assess technology risks, security controls, AI governance and third-party risk across Supermicro’s data center, cloud and networking solutions. The role combines IT audit, data analytics and compliance reviews with collaboration across business and technology teams.

Descriere

  • Plan and conduct risk-based IT audits against regulatory requirements.
  • Research the functions and systems under review, assess risks and controls, set audit scope and objectives, and engage stakeholders.
  • Review the design and effectiveness of IT general and application controls.
  • Carry out walkthroughs, interviews, data analysis and other audit procedures.
  • Use data analytics to define scope, confirm population completeness, test exceptions and create repeatable procedures.
  • Maintain workpapers and document findings and recommendations in line with professional standards.
  • Review compliance with SOX, ISO 27001, NIST, applicable regulations and internal policies.
  • Assess security across identity and access management, data, networks, cybersecurity and vulnerability management.
  • Review AI governance, including inventory awareness, acceptable-use controls, AI tool data handling and human oversight.
  • Audit third-party risk practices, including vendor controls, independent assurance reports and ongoing monitoring.
  • Assess risks related to cloud computing, big data, AI and other emerging technologies.
  • Identify opportunities to improve controls and advise management.
  • Prepare and present clear audit reports on findings, risks and recommendations.
  • Work with IT teams, business leaders, Security, Procurement and external auditors.
  • Track audit recommendations and follow up on remediation.
  • Deliver assigned reviews efficiently and cost-effectively while maintaining quality.
  • Keep informed about emerging technologies, security threats and regulatory changes.

Cerințe

  • Bachelor’s degree required.
  • At least five years of relevant experience in IT or operational internal audit, Big Four public accounting, Sarbanes-Oxley, risk consulting or internal controls.
  • Ability to connect business strategy with key processes and controls and understand associated risks and IT impacts.
  • Ability to evaluate the design and effectiveness of controls in key systems.
  • Ability to assess programs and projects, including governance and solution designs.
  • Understanding of the IT roadmap and ability to discuss future developments with management.
  • Working knowledge of IT program management best practices.
  • Demonstrated use of data analytics and visualization for audit, compliance or risk testing.
  • Experience with Power BI or a similar business intelligence tool; Power BI is strongly preferred.
  • Working knowledge of security compliance frameworks and concepts, including NIST, ISO 27001 and SOX IT general controls.
  • Familiarity with third-party or vendor risk assessment and audit.
  • Working knowledge of AI governance, responsible AI principles, AI-related risks and regulatory expectations.
  • Experience with generative AI tools such as Microsoft Copilot, ChatGPT or similar is highly desirable.
  • Experience auditing SAP HANA or comparable ERP systems is a plus.
  • Proficiency in SQL and at least one programming language used in data analytics; Python is preferred.
  • CISA, CISSP, CISM, CIA or a comparable certification, earned or in progress, is a plus.
  • Experience building regular, collaborative relationships with key risk stakeholders to promote risk awareness and transparency.

Beneficii

  • Comprehensive benefits package.
  • May be eligible for bonus programs.
  • May be eligible for equity award programs.

Locuri de muncă similare

NVIDIA

Senior Cloud Infrastructure and Reliability Solutions Architect

NVIDIA

Lead Day 2 reliability for NVIDIA Cloud Partner GPU fleets across EMEA. Automate fault recovery, observability, maintenance, and Kubernetes operations at scale.

Deschide