Senior IT Internal Auditor

About the role

The Senior IT Internal Auditor supports the organization’s Sarbanes-Oxley (SOX) compliance program and contributes to risk-based internal audit and advisory engagements. This role executes audit procedures, including walkthroughs and testing of control design and operating effectiveness, with a primary focus on IT General Controls (ITGCs), automated controls, and IT-dependent controls. The position performs audit procedures with moderate supervision and contributes to the delivery of high-quality audit and advisory engagements. Close collaboration with control owners, IT teams, and external auditors is required to ensure timely and high-quality audit execution. The Senior IT Internal Auditor also contributes to broader internal audit initiatives by identifying risks, evaluating control environments, and providing recommendations to enhance operational effectiveness and compliance. This is a hybrid role requiring three days in the home office based in Richmond, VA.

Role and Responsibilities

• Participate in the planning, execution, and completion of risk-based internal IT audits covering infrastructure, applications, cybersecurity, data governance, technology operations, business continuity processes, and IT‑enabled business areas.
• Perform design and operating effectiveness testing of IT general controls, including ITGCs, automated controls, and key reports/IT-dependent controls.
• Participate in the annual risk assessment of IT audit topics and support the development of the annual IT audit plan.
• Work collaboratively with colleagues at all levels to understand, plan, and perform IT audits and tests of controls.
• Work collaboratively with external auditors, including supporting reliance activities and coordinating testing efforts.
• Perform special projects, as assigned.
• Demonstrate sound judgment, maintain confidentiality, and handle sensitive information appropriately.

Conduct Standards

• Act with integrity
• Act with due skill, care and diligence
• Be open and cooperative with the CBI, FCA, the PRA and other regulators
• Pay due regard to the interests of customers and treat them fairly
• Observe proper standards of market conduct
• Act to deliver good outcomes for retail customers

Preferred Skills

• Experience in public accounting (assurance or advisory), with Big Four or a reputable regional firm, preferred.
• Proficiency in Microsoft Office suite.
• Strong written and verbal communication skills.
• Ability to work independently while contributing effectively within a team environment.
• Curiosity and passion for understanding emerging technology, cyber, and AI‑related risks.
• Experience with information systems auditing, SOX compliance, and internal controls frameworks.
• Strong analytical, organizational, and problem-solving skills with attention to detail.
• Knowledge of generally accepted accounting principles (GAAP), the IIA International Professional Practices Framework (IPPF), COSO’s Internal Control – Integrated Framework, preferred.

Qualifications

• Bachelor’s degree in accounting, Finance, Information Systems, or a related field.
• Minimum of 4+ years of relevant experience in IT audit, internal audit, or information systems control environments.
• Professional certifications are preferred (one or more):
  • Certified Information Systems Auditor (CISA)
  • Certified Internal Auditor (CIA)
  • Certified Public Accountant (CPA)

What you can expect from us

At Hamilton, we offer a vibrant, entrepreneurial and collaborative workplace shaped by our values: Be Smart, Be Sensible, Be Open and Be More. Our employees consistently say they would recommend Hamilton as a great place to work — a testament to the inclusive, supportive, and empowering culture we’ve built together. We embrace individuality, value diverse perspectives, and recognise the unique contribution each person makes to our continued success.

• Hybrid working
• Matching 401K plan
• Medical, dental, vision, life, disability
• Generous time off (including parental leave)
• Continued support for professional development
• Gym subsidy
• My day (additional days leave for personal interests/wellness/charity work)