Senior IT Auditor

PENN Entertainment, Inc. is North America’s leading provider of integrated entertainment, sports content, and casino gaming experiences. From casinos and racetracks to online gaming, sports betting and entertainment content, we deliver the experiences people want, how and where they want them.

We’re always on the lookout for those who are passionate about creating and delivering cutting-edge online gaming and sports media products. Whether it’s through ESPN BET, Hollywood Casino, theScore Bet Sportsbook & Casino, or theScore media app, we’re excited to push the boundaries of what’s possible. These state-of-the-art platforms are powered by proprietary in-house technology, a key component of PENN’s omnichannel gaming and entertainment strategy.

When you join PENN Entertainment’s digital team, you’ll not only work on these cutting-edge platforms through theScore and PENN Interactive, but you’ll also be part of a company that truly cares about your career growth. We’re committed to supporting you as you expand your skills and explore new opportunities.

With locations throughout North America, you can build a future at PENN Entertainment wherever you are. If you want to challenge conventions in gaming, media and entertainment, we want to talk to you.

About the Role

Reporting to the IT Audit Senior Manager, the Senior IT Auditor is responsible for assisting with the independent assessment and evaluation of risks, internal controls, processes and management practices related to information technology. This role will provide the opportunity to combine your technical, auditing and people skills to effectively assist in advising and supporting the enterprise on risk related matters. You will join a dedicated and motivated team with exposure to multiple lines of business within theScore.

About the Work

• Execute audits that primarily deal with technology in the areas of IT infrastructure, processes, applications, operations, security and emerging technologies
• Support and facilitate audit requests from regulators, external auditors, and business partners on behalf of internal stakeholders
• Liaison with external auditors regarding IT process documentation, testing procedures, audit requests, and audit findings to achieve audit efficiencies
• Conduct walkthrough with management, document audit workpapers that articulate scope, objectives, procedures and conclusions of the work performed
• Assess and report on control design and effectiveness by testing controls against company policies, external regulations and accounting requirements
• Identify gaps or areas of improvement and evaluate their significance and potential business impact to propose remediation steps that are practical and reasonable
• Perform follow-up and oversee actions taken regarding audit recommendations with management to strengthen current control environment
• Assist in providing input and recommendations to audit management in developing a risk-based annual audit plan
• Assist in providing advisory services to business management on issues related to IT risk assessment, controls and governance
• Participate in special investigations related to Information Technology and system configurations, as required
• Work on initiatives to increase the effectiveness, value and reputation of the audit department
• Other duties as assigned

About You

• Undergraduate degree in Information Technology related field or Accounting
• Certified Information Systems Auditor (CISA). The preferred candidate may also have one or more of the following designations: CPA, CIA, CISSP, or CISM
• 2-4 years of working experience in IT Internal Audit and/or consulting practice with a strong risk-based audit foundation
• Big 4 public accounting firms or equivalent experience preferred
• The candidate must have strong technical knowledge of IT platforms, operating systems, network services, security, privacy and business applications
• Experience with data analytics or an analytical mindset
• Experience auditing large enterprise IT implementations with knowledge of project methodologies, project controls and ability to effectively work with cross functional project teams
• Knowledge of Audit assurance, governance and control frameworks such as COBIT, NIST and ISO, Service Organization Controls (SOC) Reporting standards (e.g. CSAE 3416, Section 5025, AT 101) sufficient to interpret and apply IT risk and control concepts
• Strong negotiation and mediation skills with the ability to form an opinion on risks, controls and impact to business
• Ability to present complex information clearly and influence the outcome through effective verbal and written communication
• Good interpersonal skills and ability to cultivate strong working relationships in a team environment is a must

What We Offer

• Competitive compensation package.
• Comprehensive Benefits package.
• Fun, relaxed work environment.
• Education and conference reimbursement

#LI-REMOTE