ERCOT · 4 months ago
IT Internal Auditor
ERCOT is a dynamic organization focused on building the future of the Texas power grid and wholesale market. The IT Internal Auditor evaluates processes, procedures, and internal controls over operations and IT processes, ensuring compliance with internal auditing standards while contributing to the overall effectiveness and efficiency of the organization.
Energy
Responsibilities
Understands and applies principles, theories and concepts related to the profession and ERCOT's culture
Exercises judgment within defined procedures and practices to determine appropriate action
Impact is generally limited to specific assignments or projects
May respond to inquiries and/or provide assistance and/or guidance to lower level workers
Participates in audits at all levels of management and staff throughout the organization
Reviews policies, procedures and other related documentation to obtain understanding of each area being audited
Follows audit program with specific testing criteria to evaluate risks and controls within the audit area
Ensures adequate internal controls are maintained by following up on prior audit recommendations
Documents all work thoroughly and completely to support audit results. Adheres to the standards of the Internal Audit profession
Assists with drafts, reports and other formal communications on the results of each audit with review by a Lead Auditor or the Director, Internal Audit
Builds knowledge to achieve proficiency for conducting internal audits and business reviews independently
Conducts audits with all levels of management and staff throughout the organization
Identifies risks within each audit area
Develops audit programs with specific testing criteria to evaluate risks and controls within the audit area
Recommend improvements in procedures, processes and operations across the organization
Draft and issues reports and other formal communications on the results of each audit
Identifies risks within each audit area and may initiate investigations and audits to mitigate risk impacts and strengthen controls
Review work papers for completeness, accuracy, and adherence to professional practices standards
If assigned by the Director of Internal Audit, monitors ERCOT’s standards of conduct and ethical relationships with market participants, stakeholders, regulators, suppliers, and employees
Drafts and issues reports and other formal communications on the results of each audit
Provides training to new employees and contractors along with refresher training for current employees about audit process, procedures, and proposed operational changes
Petitions management for investigations and audits to mitigate risk impacts and strengthen controls
Interfaces with external auditors when engaged to jointly review, evaluate and report findings on internal processes, controls, and business results
Oversees report draft and editing, and reviewing work papers for accuracy that are done by more junior audit team members
Participates on cross functional project teams or consulting activities utilizing operations and Information Technology principles, Standards, and controls
Has obtained specialized technical skills and competencies
Works on audits with diverse ambiguous scope requiring significant and complex data retrieval and analysis
Qualification
Required
Evaluates processes, procedures, and internal controls over operations and IT processes, systems, and applications throughout the organization
Documents evaluations clearly, completely, and in accordance with internal auditing standards
Understands and applies principles, theories and concepts related to the profession and ERCOT's culture
Exercises judgment within defined procedures and practices to determine appropriate action
Impact is generally limited to specific assignments or projects
May respond to inquiries and/or provide assistance and/or guidance to lower level workers
Participates in audits at all levels of management and staff throughout the organization
Reviews policies, procedures and other related documentation to obtain understanding of each area being audited
Follows audit program with specific testing criteria to evaluate risks and controls within the audit area
Ensures adequate internal controls are maintained by following up on prior audit recommendations
Documents all work thoroughly and completely to support audit results
Adheres to the standards of the Internal Audit profession
Assists with drafts, reports and other formal communications on the results of each audit with review by a Lead Auditor or the Director, Internal Audit
Builds knowledge to achieve proficiency for conducting internal audits and business reviews independently
Conducts audits with all levels of management and staff throughout the organization
Identifies risks within each audit area
Develops audit programs with specific testing criteria to evaluate risks and controls within the audit area
Recommend improvements in procedures, processes and operations across the organization
Draft and issues reports and other formal communications on the results of each audit
Identifies risks within each audit area and may initiate investigations and audits to mitigate risk impacts and strengthen controls
Review work papers for completeness, accuracy, and adherence to professional practices standards
If assigned by the Director of Internal Audit, monitors ERCOT's standards of conduct and ethical relationships with market participants, stakeholders, regulators, suppliers, and employees
Drafts and issues reports and other formal communications on the results of each audit
Provides training to new employees and contractors along with refresher training for current employees about audit process, procedures, and proposed operational changes
Petitions management for investigations and audits to mitigate risk impacts and strengthen controls
Interfaces with external auditors when engaged to jointly review, evaluate and report findings on internal processes, controls, and business results
Oversees report draft and editing, and reviewing work papers for accuracy that are done by more junior audit team members
Participates on cross functional project teams or consulting activities utilizing operations and Information Technology principles, Standards, and controls
Has obtained specialized technical skills and competencies
Works on audits with diverse ambiguous scope requiring significant and complex data retrieval and analysis
Level 2: Requires minimum 2 years job related work experience in excess of degree requirements
Level 2: Requires minimum 2 years progressively responsible experience in auditing and a track record of proven experience in either successfully leading audits and ‘first time performed' audits, or completing fieldwork on technical industry specific subject matter areas
Level Senior: Requires minimum 5 years job related work experience in excess of degree requirements
Level Senior: Requires minimum 5 years progressively responsible experience in auditing and a track record of proven experience in either successfully leading audits and ‘first time performed' audits, or completing fieldwork on technical industry specific subject matter areas
Bachelor's Degree: Computer Science, Information Technology, Cyber Security, Accounting, Finance, Business Administration or related field is required
A combination of education and experience that provides equivalent knowledge to a major in such fields is required
Preferred
Experience auditing against IT governance frameworks, risk management, and control environments (e.g. NIST, ITIL, ISO, COSO)
Experience auditing information security, cloud technologies, Artificial Intelligence technologies, change and release management, configuration management, software licensing, identify and access management, disaster recovery, and cyber security
Knowledge of IT organizational structures, infrastructure, architecture, and technology stacks
Knowledge of databases, applications, storage, and networking processes and controls
CISA Certified Information Systems Auditor
CIA Certified Internal Auditor
CISM, Certified Information Security Manager
CISSP, Certified Information System Security Professional
Company
ERCOT
The Electric Reliability Council of Texas (ERCOT) manages the flow of electric power to 24 million Texas customers.
Funding
Current Stage
Late StageRecent News
2025-11-08
2025-10-25
2025-09-28
Company data provided by crunchbase