Senior IT SOX Auditor, Internal Audit

About the role

This role is part of Docusign's global internal audit function. The Senior IT Auditor will engage with business leaders, IT Management, and the 2nd line of defense to plan and perform audits ranging from basic to complex, including SOX, SOC, ISO. Responsibilities include conducting IT risk assessments, scheduling audit tests, acquiring necessary information, assessing internal controls, evaluating fraud prevention measures, preparing and presenting findings, and communicating audit results and recommendations.

Responsibilities

• Conduct IT risk assessment by understanding business objectives, internal controls, enabling technology, and IT infrastructure
• Audit system development life cycle, access controls, IT Automated Controls (ITACs), Key Calculations and Reports (KCRs), cyber security procedures, and third party risk management
• Engage with auditees to acquire necessary information and perform audit work over various technologies and IT functions
• Evaluate both the design and operating effectiveness of internal controls
• Prepare and present findings as needed and communicate audit results and recommendations both orally and in writing to management
• Schedule and conduct presentations at meetings with auditees and management as needed
• Identify and implement processes to optimize efficiencies across audit projects
• Contribute to identification of department operational efficiencies and changes in auditing operations
• Maintain and continuously improve upon Internal Audit's role and reputation as a trusted advisor
• Acquire additional knowledge of regulations and emerging technologies
• Remain informed of industry and risk management best practices, trends, and standards

Requirements

• Basic 5+ years audit experience, including testing ITGCs, ITACs, KCRs, SOX, SOC and ISO
• Certifications, identifying gaps, generating audit recommendations, and writing reports
• Experience with audit principles, such as risk assessment, materiality, and sufficiency of audit evidence
• Experience managing complex Audit workloads and competing priorities with clear communication and accountability
• Experience with relevant regulations and industry standards (e.g., SSAE 18/SOC, COSO, COBIT)
• Bachelor’s degree
• Fluent in English

Preferred

• Strong performance at the Senior Consultant level within a big-4 or top tier consulting firm
• Bachelor’s degree in Accounting, Finance, MIS, IT or relevant field
• Certification in a relevant field (e.g., CISA, CISSP, CIA, and/or CPA certification)
• Experience working with a SaaS platform
• Experience with large cross-functional and globally distributed teams
• Passion for audit, compliance, governance, information security, privacy and risk
• Investigative mindset with a passion for drilling down into technical complexities to understand the root-cause of issues or inefficiencies
• Strong problem-solving and audit/risk expertise with the composure to deliver results and customer satisfaction in critical situations

Skills

• Understanding of IT audit principles and methodologies
• Knowledge of relevant regulations and industry standards
• Ability to assess and evaluate internal controls
• Proficiency in audit software and tools
• Excellent communication and interpersonal skills
• Attention to detail and ability to manage multiple tasks simultaneously

Benefits

• Paid Time Off
• Paid Parental Leave
• Full Health Benefits Plans
• Retirement Plans
• Learning and Development
• Compassionate Care Leave
• Employer Contributions

Pay

The pay for this position is based on a number of factors including geographic location and may vary depending on job-related knowledge, skills, and experience. Based on applicable legislation, the below details pay ranges in the following locations:

• California: $50.90 - $78.58/hour
• Washington, Maryland, New Jersey and New York (including NYC metro area): $48.80 - $69.95/hour

Schedule

This role is hybrid: Employees divide their time between in-office and remote work. Access to an office location is required. (Frequency: Minimum 2 days per week; may vary by team but will be weekly in-office expectation).