IT Internal Auditor

We are Generac, a leading energy technology company committed to powering a smarter world.

Over the 60 plus years of Generac’s history, we’ve been dedicated to energy innovation. From creating the home standby generator market category, to our current evolution into an energy technology solutions company, we continue to push new boundaries.

The IT Internal Auditor serves a pivotal role in preparing audit plans, conducting internal audits, assessing control readiness, and preparing comprehensive audit reports.

Major Responsibilities:
- Develop and implement comprehensive audit plans, including objectives, scope, and methodology.- Conduct internal audits and assessments of IT systems, processes, and controls to ensure compliance with relevant standards and frameworks (ISO 27001:2022, NIST SP 800-53 Rev.5, NIST CSF 2.0)- Assess control readiness and identify potential areas of risk or non-compliance.- Prepare detailed audit reports, summarizing findings, recommendations, and corrective actions.- Conduct workshops and oversee remediation efforts to ensure effective implementation of corrective actions- Report audit findings, compliance status, and recommendations to stakeholders, providing clear and actionable insights to support informed decision-making and strategic planning.- Monitor compliance with current and emerging laws, regulations, and standards, ensuring the organization’s practices align with legal and regulatory requirements.- Assist in the development and maintenance of policies, procedures, standards, and guidelines to streamline operations.- Provide guidance and support to the IT and security teams on compliance and control matters.- Provide sales support by offering insights on practices and controls and responding to customer inquiries.- Support external audits and assessments as required.

Minimum Requirements:
- Bachelor’s degree in computer science, information technology, management information systems or a related field- 4+ years experience in conducting internal audits and control assessments, with a focus on ISO 27001, NIST SP 800-53, NIST CSF- Prior experience in auditing technical controls and cloud environments (e.g., AWS, Azure, GPC)

Preferred Qualifications:
- Professional certifications such as CISA, CRISC, CISSP, or CIA are preferred, or a willingness to obtain such designations.- Experience in the energy technology sector or a similar industry.

Knowledge, Skills, and Abilities:
- In-depth knowledge of industry standards and frameworks, including ISO 27001, NIST SP 800-53 Rev.5, NIST CSF 2.0.- Strong understanding of IT security principles, risk management, and compliance frameworks.- Excellent analytical, problem-solving, and communication skills.- Ability to work independently and as part of a team, managing multiple priorities and deadlines.- Strong attention to detail and commitment to maintaining the highest standards of integrity and confidentiality

Physical Demands: While performing the duties of this job, the employee is regularly required to talk and hear; and use hands to manipulate objects or controls. The employee is regularly required to stand and walk. On occasion the incumbent may be required to stoop, bend or reach above the shoulders. The employee must occasionally lift up to 25 - 50 pounds. Specific conditions of this job are typical of frequent and continuous computer-based work requiring periods of sitting, close vision and ability to adjust focus. Occasional travel.
- “We are an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability status, protected veteran status, or any other characteristic protected by law.”_