Kura Sushi USA is a publicly traded U.S. company established in 2008 as a subsidiary of Kura Sushi, Inc. We are an innovative and tech interactive Japanese restaurant chain serving up the ultimate eater-tainment dining experience with a combination of premium ingredients, advanced technology, and affordable prices to create a one-of-a-kind revolving sushi dining experience.

Come join the Kura Krew!

We have and exciting opportunity for a Sr. Manager of IT Internal Audit to join our growing team. The Sr. Manager of IT Internal Audit will be responsible for assisting the Director in SOX planning in: 

• Leading and managing IT walkthroughs, testing and documentation requirements to ensure the adequacy and application of information technology general controls related to cybersecurity, security management, change management, computer operations and systems development life cycle (SDLC). 
• Conduct complex risk based corporate level IT audits to include but not limited to, the preparation and implementation of a risk-based audit plan to assess, report on, and make recommendations for enhancing Kura’s key operational and internal controls relating to information technology, processes and people. 
• IT audits cover the following subject matters: IT and cybersecurity reviews, IT SOC Evaluations, Business Continuity Management and Disaster Recovery, Project Management, Pre and Post implementation reviews for IT projects, Change Management, Logical Access Management, IT Governance, Data Backup, Cloud Computing, IT Operations and AI. 
• Ensures compliance with plans, policies, and procedures prescribed by Company executive management.

This role is a hybrid role.  The selected candidate must be able to come to the office in Irvine, CA on in office days and as needed to carry out necessary functions of the role.

 ESSENTIAL DUTIES

• Assists the Internal Audit Director in developing the annual audit plan to include IT SOX planning by gathering pertinent information, identifying key information technology risks impacting accounting, financial, operational regulatory compliance activities and determining whether the Company has properly mitigated these risks. 
• Reviews staff workpapers to include documented procedures, findings, and recommendations; interfaces with management to explain audit findings and written responses and performs follow-up to ensure appropriate remedial actions are completed. 
• Manages IT projects to assist process owners in documenting complete and relevant information technology process documentation impacting financial and operational risks to ensure compliance with the requirements of the Sarbanes-Oxley Act of 2002 and related corporate governance requirements. 
• Coordinates and/or obtains information requested for IT SOX testing. Identifies and tests key IT process controls; evaluates the design and effectiveness of processes; interfaces with management to explain process deficiencies, discuss remedies, and ensure remedial actions are completed. 
• Assists in identifying emerging risks related to regulatory compliance initiatives, e.g., Cybersecurity, CCPA, PCI, SOX, ESG, etc. 
• Reviews and analyzes current accounting, operational and information technology procedures and identifies related IT control weaknesses and system inefficiencies. Suggests and develops methods to improve systems and controls. 
• Assists Internal Audit Director with maintaining the COSO Assessment framework adopted by Kura and in facilitating IT risk assessments, e.g., IT, fraud, financial statement and enterprise risk assessments. 
• Coordinates and/or obtains IT information requested by outside auditors pertaining to corporate audits and SOX audits. 
• Responsible for coordination of all deliverables (such as IT reports, RACM, working papers, ) for assigned internal audits 
• Demonstrates proficient technical skills including knowledge of trends, industries, alternatives. 
• Monitor the status and timely resolution of internal and external IT audit recommendations 
• Develop understanding of core IT processes and look for opportunities to help IT management in gaining process efficiencies and control optimization. 
• Develops and maintains a collaborative working relationship with the VP of IT management, and external IT auditing managers/directors.
• Develop and maintain relationships with key business stakeholders including senior management. 
• Work collaboratively with external auditors to effectively plan and execute SOX IT audits where required. 
• Administers AuditBoard security/change management activities, e.g., provisioning/de-provisioning of AuditBoard users such as IA/Mgmt./3 rd party and Board Member users. 
• Provides relevant IT training to business/system owners as needed. 
• Mentors and provides encourages professional staff development. 
• Attends professional training to keep abreast of emerging risks, methodologies and technology. 
• Performs other related duties, tasks and responsibilities as required, assigned, and directed.

QUALIFICATIONS AND EDUCATION/EXPERIENCE

• Bachelor’s or Master’s degree in computer science/information systems or related field. Additional accounting degree desirable. 
• Possess a professional certification, CISA, CISSP or CISM. Additional CIA certification desirable but not required. 
• 7 to 9 years strong professional IT auditing experience to include a combination of operational experience, corporate IT internal audits, IT risk management, IT SOX and IT governance in a publicly-traded corporate environment..
• At least 4-5 years recent experience with a Big 4 firm with a thorough knowledge of SOX and auditing procedures. 
• Must have public company experience, experience conducting IT internal audits for a publicly traded company.  Restaurant industry experience  highly desired.
• Strong understanding of IT systems, networks, and infrastructures to effectively audit and evaluate their efficiency and security. 
  
• Thorough knowledge of IT auditing techniques, principles, and standards to ensure the organization’s IT systems comply with regulatory and legal requirements 
• Proficient understanding of COBIT framework, strong technical knowledge of relevant audit standards, ISO, NIST, SOC 1/2 Type II 
• Proficient with administering AuditBoard and continuous monitoring, e.g., ACL, IDEA, etc. 
• Requires professional knowledge of accepted IT audit standards and auditing principles and practices to exercise broad discretion in completing audits of a varied nature. 
• Strong personal computer skills; in-depth knowledge of Microsoft Office applications (Excel, Word, Access, Visio, PowerPoint) and GRC administration AuditBoard, Workiva, etc.). 
• Demonstrates integrity and ethical behavior. 
• Collaborative mind-set, high degree of integrity, professionalism, motivation and maintains a positive team attitude. 
• Demonstrates strong verbal, written communication, and interpersonal skills. 
• Demonstrates ability to apply professional skepticism, critical thinking, and analysis in executing audit tasks. 

PAY RANGE: $140,000 - $170,000/yr. DOE + STIC (annual bonus) + LTIC (equity incentive)