IT Auditor

About the role

Microsoft Internal Audit is seeking an IT Auditor to evaluate risks, controls, and governance across cloud services, datacenter operations, infrastructure, cybersecurity, networking, software engineering, and emerging technologies, including AI. In this role, you will assess whether technology systems and processes effectively manage risk and support secure, reliable, and scalable operations.

As an individual contributor, you will lead risk-based audits across planning, fieldwork, reporting, and follow-up, partnering with engineering, operations, security, and business stakeholders to identify control gaps, evaluate technology risks, and provide objective insights. This role is ideal for professionals who enjoy understanding complex systems, identifying improvement opportunities, and communicating technical risks to both technical teams and executive leadership.

Responsibilities

• Evaluate risks and controls for software development, service operation, IT infrastructure, security, and related processes by conducting internal audit projects.
• Communicate observations, risks, recommendations, and conclusions reached, as well as provide consulting services regarding risk and controls on a wide range of projects and corporate initiatives.
• Conduct reviews in highly technical areas of current/emerging technologies including artificial intelligence, various cloud environments, security, networking, Windows, and Unix.
• Remain current and increase knowledge in auditing, business, company products, and Microsoft technologies through self-study and continuing education.
• Develop draft audit reports by identifying and gathering support for potential issues, and recommending solutions.
• Utilize departmental audit systems to manage projects, work papers, risk assessment, reporting, and follow-up.
• Communicate with departmental representatives and client management regarding project status.
• Coordinate with external auditors (as needed) and work with outside contractors on specific IT audit engagements.
• Establish and maintain proficient customer relationships with internal stakeholders, managers, and staff.

Qualifications

• Bachelor's Degree in Business, Computer Science, Engineering, or related field AND 3+ years auditing, security, privacy, control and compliance, or related experience OR equivalent experience.
• A BS/BA degree, preferably in information systems, computer science, engineering, or other related IT field, or a minimum of 5 years of experience in hardware or software product development, IT audit, IT Assurance, or closely related field, security operations.
• Knowledge of external leading risk and controls frameworks such as COBIT (Control Objectives for Information and related Technology), ISO27000, NIST, and IT-related internal controls.
• Professional certification such as CISSP, GIAC, MCP, CCNA, CISA, CIA, AZ-500, or AZ-104.
• Experience with cloud operations, networks, security, and specialized skills.
• Experience conducting datacenter audits and staying abreast of Artificial Intelligence (AI) developments.

Pay

The typical base pay range for this role across the U.S. is USD $77,800 - $153,700 per year. There is a different range applicable to specific work locations, within the San Francisco Bay area and New York City metropolitan area, and the base pay range for this role in those locations is USD $102,200 - $169,900 per year. Certain roles may be eligible for benefits and other compensation.