Senior IT Auditor

Key Responsibilities

• Lead IT audit engagements from scoping through draft report preparation, including fieldwork, workpaper documentation, and findings development.
• Execute and review SOX IT General Controls (ITGC) and IT Application Control (ITAC) testing, including process walkthroughs, design and operating effectiveness assessments, and deficiency evaluations.
• Perform non-SOX operational and compliance audits across key IT areas, including IT governance, cybersecurity, cloud configuration, corporate systems, operational systems, system development, third-party program management, and disaster recovery.
• Guide and review the work of staff by providing real-time coaching, workpaper feedback, and quality assurance throughout each engagement.
• Support the annual risk assessment and audit planning process by contributing process-level insights and engagement scoping recommendations.
• Draft clear, well-supported audit findings and management reports that translate control issues into actionable business recommendations.
• Monitor open audit findings and follow up with process owners to support timely and sustainable remediation.
• Contribute to the continuous improvement of audit methodologies, workpaper templates, and departmental processes.
• Design and implement automated audit procedures using available tools, including AI solutions.

Qualifications

• Bachelor’s degree in Information Systems, Computer Science, Accounting, Business, or a related field required; an advanced degree preferred.
• 3+ years of relevant IT audit experience.
• Big 4 or comparable public accounting experience strongly preferred.
• At least one active, audit-related professional certification strongly preferred, such as CISA, CISSP, CPA, or CIA.
• Solid working knowledge of SOX ITGC, ITAC, and IPE requirements, as well as risk-based audit methodologies.
• Proven ability to manage IT audit engagements independently from planning through reporting, with minimal oversight.
• Strong workpaper documentation skills, with close attention to detail, accuracy, and audit quality.
• Strong written and verbal communication skills, with the ability to write findings that business stakeholders can understand and act on.
• Collaborative team player who can lead and develop junior staff.