IT Audit Supervising Senior Associate | Internal Audit | Risk & Advisory Services

CBIZ Risk & Advisory Services (RAS) offers consulting, outsourcing, and co-sourcing services to public and private companies by combining national expertise with highly personalized service. As part of CBIZ (NYSE: CBZ), RAS provides internal audit, Sarbanes-Oxley compliance, cybersecurity, supply chain management, vendor management, business continuity planning, and risk consulting services to leading businesses across North America.

About the role

The CBIZ RAS group is seeking an experienced, motivated, and detail-oriented IT Audit Supervising Senior Associate to support the execution of internal audits with a focus on IT General Controls (ITGCs) and Sarbanes-Oxley (SOX) IT compliance. This position reports to the IT Audit Manager or Senior Manager and follows a hybrid work schedule.

In this role, you will perform audit procedures, evaluate control effectiveness, and prepare high-quality documentation under the guidance of audit leadership. The ideal candidate will have a strong foundation in IT risk and controls, excellent analytical skills, and the ability to collaborate effectively with internal team members and cross-functional stakeholders while communicating clearly and professionally with both colleagues and clients.

As an IT Audit Supervising Senior Associate, you will be a vital member of the Information Technology consulting practice within the RAS team, delivering exceptional service to clients across a variety of industries. You’ll have the opportunity to work with innovative companies driving growth and shaping the future of business.

Responsibilities

• Perform, document, and review testing of IT processes related to Sarbanes-Oxley compliance and internal audit plans, including areas such as Logical Access, Change Management, and Computer Operations.
• Evaluate the adequacy and effectiveness of internal controls, identify control gaps or noncompliance with internal policies, and draft audit findings and related recommendations for management review.
• Draft and maintain key audit documentation, including process narratives, risk and control matrices, test plans, and lead sheets for increasingly complex audit areas. Ensure documentation reflects current processes, aligns with organizational and professional audit standards, and appropriately applies firm methodologies and tools to meet client needs.
• Coordinate and lead audit activities, including process walkthroughs, evidence collection and organization, audit status updates, and project meetings with team members and clients.
• Prepare and review clear, concise, client-ready reports and deliverables that communicate control issues, risk/business impact, and recommended action plans.
• Demonstrate effective project management skills by supporting the planning of project scope and approach, coordinating team member assignments, tracking budgets and budget status, monitoring team utilization, supporting client invoicing, and communicating project results and findings to the Project Manager.
• Collaborate with project managers to keep audit work on track, manage multiple projects at once, and align work with engagement objectives.
• Serve as a primary mentor for Associates, Senior Associates, and interns—train team members, review audit programs and workpapers to verify testing has been completed and documented appropriately, clear review comments in a timely manner, and provide structured feedback and coaching to build technical and professional skills.
• Serve in a consultative role for clients seeking third-party assessments of their IT environment by applying knowledge of the client’s business and industry, identifying relevant IT risks, tailoring procedures to the engagement, and providing practical insights.
• Perform additional responsibilities as assigned, contributing to department initiatives, continuous improvement efforts, and the development of team members through knowledge sharing and support of increasingly complex tasks.

Requirements

• Bachelor’s degree in Accounting, Finance, Information Technology, or a relevant field.
• 3–5 years of experience in public accounting or a publicly traded organization’s Internal Audit or IT department.
• CISA, CIA, or similar relevant certification.
• Understanding of ERP systems and financial systems.
• Ability and experience in performing SOX audits (document process flows/narratives, assess design/operational effectiveness of internal controls).
• Knowledge of Sarbanes-Oxley legislation and impact, COBIT, and COSO.
• Strong project management skills, including the ability to coordinate assignments, track budgets, monitor utilization, support client status reporting, and meet work-plan specifications and deadlines.
• Ability to clearly communicate verbally and in writing throughout all levels of organizations, both internally and externally.
• Strong writing and documentation skills, including the ability to draft comprehensive project reports, client-ready deliverables, detailed notes, process narratives, and professional client communications.
• Advanced proficiency with applicable technology, particularly MS Excel and Teams. Familiarity with audit software tools like Workiva and Optro (AuditBoard).
• Must possess analytical skills and demonstrated ability to communicate verbally and in writing throughout all levels of the organization, both internally and externally.
• Must be able to travel based on client and business needs.