IT Controls Lead

IT Controls LeadStatus: Exempt (Salaried) Department: ITPosition SummaryPlug Power is seeking an IT Controls Lead to work cross-functionality throughout the organization to identify and make recommendations on information technology risk and control optimization. The ideal candidate has prior IT auditor experience and is familiar with SaaS (Software-as-a-Service) Architecture, security, support and operations. The selected candidate will define a controls framework, assist in conducting assessments, and provide consulting services to management and users on information and systems risk and compliance.  This includes performing IT, financial, and operational audits in order to evaluate compliance with Plug Power and public sector policies and procedures. The IT Controls Lead must be self-motivated, able to handle multiple project assignments and is willing to learn and adapt within a fast-paced, growing organization.Core Duties and ResponsibilitiesConducts compliance assessments by understanding business objectives, structure, policies and procedures, internal controls, and external regulationsDevelops and maintains entity level controlsDocuments systems, processes and controls using narratives, flow charts, data flow diagrams, control designs, etc.Performs risk assessment(s) using various industry standard frameworks Assesses the effectiveness of internal controls over key IT riskCoordinates and collaborates with the internal business SOX team and critical stakeholder, liaison  for external audit deliveryIdentifies and recommends business process changes resulting in strengthened internal controlsCollaborates with control owners, IT security and compliance resources, and the internal audit team to implement process changes, risk remediations, and tracks to completionFacilitates and partners with key stakeholders in remediation efforts to any identified deficiencies by internal or external auditorsAdvises and collaborates on projects by providing IT controls expertise, considerations, and educationUnderstands and communicates the downstream impact on the business of control deficienciesBuild and maintain highly effective cross-functional relationships with colleagues to ensure effective communication and value-added working relationships.Perform all other duties as assignedEducation and Experience Bachelor's degree or equivalent in Business Administration, Computer Science, Information Systems, Mathematics, or related area of studyFive (5) to seven (7) years of general IT controls experience; supervisory experience preferredDemonstrates strong knowledge and experience in Sarbanes-Oxley (SOX) general IT control areasExperience leading an internal or external IT SOX audit or bothDomain expertise and experience in utilizing various methodologies and frameworks, including COBIT, NIST, COSO, ITIL, ISOExperience and exposure to 27001/27002 and 27018, NIST 800-53, SOC 1 and SOC 2 Type 2 concepts, and knowledge of standard SEC rules and practicesDeep understanding of general security, process, and technology concepts and practicesExcels in a fast paced and evolving environmentAbility to solve problems, improve processes, and document findingsSolutions orientated approach and strong analytic capabilitiesAbility to work both independently under general supervision and with a team; ability to take initiative and exercise strong independent judgmentEffective verbal and written communications, including active listening skills, and skill in presenting findings and recommendationsAbility to establish and maintain harmonious working relationships with co-workers, staff and external contractors/auditors, and to work effectively in a professional team environmentCBAP/CISA/CompTIA certifications or Big 4 experience desired, not requiredExposure or working knowledge of SAP S/4HANA desired, not requiredPay Rate:$75,240.00 - $112,860.00We offer a fantastic total rewards package at Plug, and a brief summary is below:✓Base salary is determined on a number of factors including but not limited to education, experience, skills, and geography. These factors are considered when making an offer of employment.  If you are interested in this position, we’d ask that you apply.✓The above pay range, may not take into account local geographic pay variations. If there is an applicable geographic differential, a member of the HR team can discuss that with you. ✓Health, Dental & Vision Insurance eligibility starting from the first day of hire✓401(k) with 5% company match✓Bonus eligibility✓Paid time off including vacation, personal and sick time✓Paid Holidays✓Wellness Reimbursement Program✓Potential to apply for Tuition Reimbursement✓Employee Referral program✓Employee Assistance ProgramPlug Power Inc. is committed to creating a diverse environment and is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status