Overview
Lead and execute IT internal audit work, including SOX testing, to assess the effectiveness of IT governance, risk management, and internal controls.
What you'll do
- Execute and lead SOX and internal audit testing across IT General Controls (ITGCs), IT Application Controls (ITACs), and other IT-focused areas.
- Plan and perform audit procedures, evaluate control design and operating effectiveness, and form risk-based conclusions.
- Develop evidence-based audit documentation supporting testing, observations, and reporting.
- Evaluate technology risks spanning access management, change management, cybersecurity, interfaces, data migration, cloud technologies, and SDLC.
- Communicate control deficiencies, opportunities for process improvement, and audit results to management and stakeholders.
- Use data analytics, automation, and technology-enabled audit tools, including AI tools such as Microsoft Copilot, Claude, and ChatGPT.
- Review work of less experienced auditors and provide coaching and feedback.
What you'll need
- 5+ years of progressive experience in IT audit/internal audit/external audit/cybersecurity/risk/compliance or related fields.
- Strong knowledge of IT risks, controls, governance frameworks, and audit methodologies.
- Experience performing SOX 404 testing and evaluating ITGCs and ITACs, including interfaces and automated controls.
- Understanding of information systems auditing concepts and risks (e.g., logical/privileged access, SDLC, cybersecurity, cloud, network security).
- Ability to communicate verbally and in writing with stakeholders at all organizational levels.
- Proficiency using data analytics, automation, and AI-enabled productivity tools for audit effectiveness and efficiency.
- Bachelor’s or Master’s degree in a related field (Information Systems, Computer Science, Business, Accounting, Engineering, or Cybersecurity).
Details
- International and domestic travel of up to 25% may be required.
Read the full description and apply on the company’s own careers page.
