Description
We are currently recruiting for an Intern to join our Information Systems Department in Louisville, Kentucky.
This position will be assisting the Director, IS Risk and Compliance in managing routine operational activities and maturing the IS risk and compliance program in the following areas. This is a year round internship.
Audit:- Enter new audit findings into IS Audit Database and on Annual Audit Summary list as they are reported by Internal Audit.
- Obtain and enter updates into IS Audit Database when reported by process owners.
- Run monthly reports in IS Audit Database showing open items.
- Compile quarterly compliance reports for IS VPs.
SOX:
- Distribute quarterly surveys and track responses.
- Coordinate and track testing by internal and external audit.
- Schedule space for external IT auditors when they are on site.
- Update key control library as SOX controls change.
Legal Holds and Law Dept Requests:- Enter legal hold requests on Tracking Spreadsheet.
- Respond to Law Dept requests re: custodian ID ranges.
- Set up cases in Discovery Accelerator.
IS Executive Standards Administration:- Schedule monthly meetings and gather documents for review from Subcommittees.
- Prepare meeting agendas, meeting minutes, and monthly scorecards.
- Post documents on Company intranet.
- Perform annual reconciliation of scorecard to Company intranet.
Risk Management Compliance website/ IS Compliance Repository:- Update website as required (i.e. when new audit reports are issued; when testing dates/document due dates are announced).
- Maintain IS Compliance Repository (build folder structures; request access changes).
Internal Project Review Committee:- Attend meetings when Director, IS Risk Compliance is not available.
Control Review externally hosted data:- Assist in review of SSAE16 reports.
- Participate in technical calls with proposed vendors.
Program Maturation:- Assist with building Risk Register (add items from audit reports, departure standards, compliance assessments, and key control gaps).
- Assist in developing IT Control Library (copying controls from SOX test plans, etc.).
- Assist in building risk management framework.
- Assist in mapping controls to policies.
Knowledge/Skills/Abilities:
- Great reading comprehension.
- Good writing skills.
- Positive attitude and ability to work well with others (not afraid to ask questions or take ownership).
- Good computer keyboard skills (will be using Microsoft office products: Word, Excel, and Access).
- Detail-oriented and ability to follow multiple steps.
- Willingness and desire to learn more about information systems control activities.
