IT Internal Auditor

This is a hybrid role with a 50% on-site requirement in Wilmington, MA.

About the role

The IT Internal Auditor supports the execution of the Company's Internal Audit plan, with responsibilities covering Sarbanes-Oxley (SOX) IT General Controls (ITGC) testing, IT operational audits, IT compliance audits, and system development life cycle (SDLC) assessments. This role evaluates the design and operating effectiveness of technology controls, identifies opportunities to strengthen governance and risk management practices, and helps enhance the overall control environment. The IT Internal Auditor participates in all phases of the audit cycle, including planning, risk assessment, fieldwork/testing, reporting, and follow-up activities, and supports the assessment of risks related to information technology, cybersecurity, system implementations, cloud-based environments, third-party service providers, regulatory compliance, and technology-enabled business processes.

Responsibilities

• Support the Company’s ongoing compliance with the Sarbanes-Oxley Act (SOX) by participating in scoping, planning, walkthroughs, control testing, issue tracking, status reporting, and coordination with external auditors.
• Execute SOX IT General Controls (ITGC) testing, including assessments of user access management, change management, computer operations, logical security, and other key technology controls.
• Assist in evaluating the design and operating effectiveness of IT controls and identifying opportunities to strengthen the Company’s control environment, risk management practices, and operational effectiveness.
• Support audits and assessments of technology-related risks, including cybersecurity, cloud computing, third-party service providers, data governance, and other emerging technology risks, as assigned.
• Participate in System Development Life Cycle (SDLC) reviews and system implementation assessments to evaluate project governance, change management, testing, security, and overall control effectiveness.
• Execute audit procedures in accordance with established audit programs, methodologies, and professional standards, while preparing clear, well-organized, and comprehensive audit workpapers.
• Analyze audit results, identify control deficiencies and process improvement opportunities, and assist in developing practical, value-added recommendations.
• Assist in the preparation of Internal Audit reports, including documenting audit scope, objectives, observations, risk assessments, recommendations, and management action plans.
• Collaborate with IT and business stakeholders to obtain information, discuss audit results, validate findings, and monitor remediation efforts.
• Maintain a working knowledge of Internal Audit methodologies, professional standards, regulatory requirements, and industry best practices.
• Contribute to departmental initiatives, training programs, knowledge-sharing activities, and continuous improvement efforts designed to enhance the effectiveness and maturity of the Internal Audit function.
• Perform other audit-related responsibilities, special projects, and ad hoc reviews as assigned.

Requirements

• 1-3 years of experience in IT Audit, Internal Audit, SOX compliance, public accounting, IT risk management, IT compliance, cybersecurity, or a related internal controls function.
• Foundational knowledge of IT General Controls (ITGCs), including user access management, change management, computer operations, and logical security controls.
• Exposure to IT operational audits, IT compliance assessments, system development life cycle (SDLC) processes, application controls, or technology risk management is preferred.
• Demonstrated commitment to professional development, including pursuit of relevant certifications such as Certified Information Systems Auditor (CISA) or Certified Internal Auditor (CIA).
• Experience with Optro (formerly AuditBoard) or other audit management software is a plus.
• Strong verbal and written communication skills, with the ability to effectively document audit procedures, communicate observations, and interact with stakeholders across all levels of the organization.
• Strong analytical, critical thinking, and problem-solving skills with a high degree of attention to detail and professional skepticism.
• Self-motivated and results-oriented, with the ability to manage multiple priorities, meet deadlines, and deliver high-quality work in a fast-paced environment with limited supervision.
• Collaborative team partner who contributes to a positive and inclusive work environment and demonstrates the ability to build effective working relationships with diverse stakeholders.
• Proficient with Microsoft Office applications (Excel, PowerPoint, Outlook, Word) and comfortable learning and using technology.
• Willingness and ability to travel up to 15% as required.
• Ability to handle sensitive and confidential information with the highest level of integrity, professionalism, and discretion.

Qualifications

• Bachelor's degree in Information Systems, Information Technology, Computer Science, Cybersecurity, Computer Engineering, Management Information Systems (MIS), Accounting, Finance, or a related field.
• Relevant professional certifications, including Certified Information Systems Auditor (CISA), Certified Internal Auditor (CIA), Certified Public Accountant (CPA), or Certified Information Systems Security Professional (CISSP), are preferred or expected to be pursued based on experience level.

Pay

The estimated compensation for this position ranges from $74,000 to $104,000. This range reflects various factors, including but not limited to the applicant's skills, qualifications, and previous work experience. Additionally, geographic differentials may apply based on the location where the position is ultimately filled.

Benefits

• 401K with Company Match
• Profit Sharing
• Health Insurance
• Employee Assistance Program
• Life Insurance
• Paid Time Off
• Tuition Reimbursement
• 30% Employee Discount
• Employee Referral Bonuses