Senior IT Internal Auditor
About the Role
A Senior IT Internal Auditor is responsible for owning and executing risk-based IT and cybersecurity audits in accordance with Internal Audit methodology, including planning, scoping, testing, and reporting. This role leads audit activities end-to-end, evaluates risks, develops audit approaches, and delivers clear, actionable recommendations to management. It also supports the Company’s Sarbanes-Oxley (SOX) compliance program, focusing on IT general controls (ITGCs), application controls, cybersecurity controls, and system-related processes. The position is open to remote work for candidates residing in the Eastern time zone.
Responsibilities
- Lead and support SOX IT compliance activities, including walkthroughs, control testing and reviews, and documentation reviews of IT general controls (ITGCs) and automated/application controls.
- Assess the design and operating effectiveness of ITGCs (user access, change management, and IT operations) across key systems and processes.
- Perform risk assessments and support audit planning, including identifying key risks, developing audit scope and objectives, and assisting in the creation of risk-based audit programs.
- Execute IT and cybersecurity audits, evaluating controls over identity and access management, change management, IT operations, vulnerability management, incident response, and data protection.
- Evaluate risks and controls related to system implementations, enhancements, and emerging technologies, including cloud and cybersecurity-related initiatives.
- Identify, assess, and communicate control deficiencies, including root cause analysis and development of actionable recommendations; support and monitor remediation efforts.
- Perform audit fieldwork and maintain high-quality documentation, including preparation and review of audit workpapers to ensure completeness, accuracy, and compliance with Internal Audit standards.
- Serve as a key liaison with IT, Information Security, business stakeholders, and external auditors, facilitating alignment on audit scope, testing, and timelines.
- Provide day-to-day guidance, oversight, and project management support for audit engagements, including reviewing work, coordinating timelines and deliverables, coaching on audit methodology, and ensuring consistent, high-quality execution.
- Support execution of financial and operational audits, providing IT expertise and assisting with planning, testing, reviews, and reporting, as needed.
- Lead and participate in inventory observations at manufacturing and distribution locations, including required domestic and limited international travel.
Requirements
- Bachelor’s degree in Accounting, Finance, Information Systems, or related field.
- Certified Information Systems Auditor (CISA), Certified Internal Auditor (CIA), Certified Public Accountant (CPA), or comparable certification required.
- Minimum of 5 years of relevant internal or external audit experience, including at least 3 years in IT audit.
- Experience with SOX compliance, including ITGC and application control testing and reviews.
- Understanding of cybersecurity frameworks and concepts.
- Knowledge of ERP systems (e.g., Oracle, SAP) and related business processes.
- Strong analytical, organizational, and problem-solving skills.
- Effective written and verbal communication skills.
- Ability to manage multiple priorities and meet deadlines.
- Willingness to travel approximately 10–20%, including participation in inventory observations and related audits.
- Experience working with external auditors.
Preferred Qualifications
- Experience auditing cybersecurity domains (e.g., identity and access management, network security, cloud security, incident response).
- Experience with automated controls, system implementations, and data analytics tools.
- Exposure to manufacturing and/or distribution environments.
- Strong interpersonal skills – ability to work closely with people at all levels of the organization and facilitate the implementation of corrective action.
- Self-starter with demonstrated organizational, project management, time management, and problem-solving skills.
- Able to balance multiple high-priority responsibilities on-time and effectively.
- Able to confront difficult issues with the appropriate response and to do so in a timely manner with any/all stakeholders.
Benefits
- Market competitive pay.
- Extensive paid time off and 9 additional holidays.
- Comprehensive healthcare, dental, and vision benefits.
- Long/short-term disability coverage.
- 401(k) with a company match.
- Maternity and parental leave.
- Additional add-on benefits/discounts for programs such as pet insurance.
- Tuition reimbursement and continued education programs.
- Excellent opportunities for advancement in a stable long-term career.
Pay
Pay range for this opportunity is $75,000.00 - $90,000.00. This position is eligible for bonus participation. Minimum pay rates offered will comply with county/city minimums, if higher than range listed. Pay rates are based on a number of factors, including but not limited to local labor market costs, years of relevant experience, education, professional certifications, and foreign language fluency.