Senior Risk and Controls Auditor

Responsibilities

• Audit Execution & Project Management
• Independently plan, scope, and execute multiple internal audit engagements simultaneously
• Develop comprehensive risk-based audit programs and testing procedures
• Lead fieldwork activities including process walkthroughs, control testing, and evidence gathering
• Identify control deficiencies, evaluate root causes, and develop practical recommendations
• Prepare clear, professional audit reports and present findings to process owners and management
• Manage audit timelines, budgets, and deliverables to ensure on-time completion
• Track management action plans and conduct follow-up procedures to validate remediation
• SOX Compliance & Controls
• Execute SOX testing procedures in accordance with PCAOB standards and COSO 2013 framework
• Evaluate design and operating effectiveness of key controls over financial reporting
• Document and assess control deficiencies (deficiency, significant deficiency, material weakness)
• Support management's assessment of internal controls and coordinate with external auditors
• Assist in control remediation efforts and validation of corrective actions
• Evaluate IT general controls including logical access, change management, and data backup/recovery
• Assess segregation of duties within ERP and other in scope systems
• Review IT application controls and automated control testing in financial systems
• Evaluate vendor SOC 1 and SOC 2 reports for third-party service providers
• Stakeholder Collaboration
• Build effective relationships with process owners, department heads, and management
• Facilitate audit entrance and exit conferences
• Communicate audit status, issues, and results throughout the engagement lifecycle
• Collaborate with external auditors, SOX team, and other assurance providers
• Continuous Improvement
• Identify opportunities to enhance audit efficiency and effectiveness
• Contribute to development and refinement of audit methodology and tools
• Stay current on industry trends, emerging risks, and regulatory developments
• Support special projects and ad-hoc requests from audit management

Requirements

• Bachelor’s degree in accounting, Finance, Business Administration, Information Systems, or related field
• Minimum 5 years of internal audit, external audit (Big Four or national firm), or related experience
• Demonstrated experience with IT audit, ITGC testing, and evaluating IT-dependent controls
• Advanced Excel skills and experience ERP systems
• Basic understanding of IT general controls including access controls, change management and segregation of duties
• Proven project management capabilities with ability to manage competing priorities
• Professional skepticism and objectivity in evaluating evidence
• Ability to work independently and collaboratively in a demanding environment
• Ability to travel domestically and internationally and work extended hours to meet deadlines

Qualifications

• Desired: CIA (Certified Internal Auditor), CPA, CISA (Certified Information Systems Auditor)
• Advanced skills in using Excel including pivot tables and look-ups tables
• Proficient in Word and Visio flowcharts
• Public company experience
• Mechanical or manufacturing industry experience
• Exposure to operational auditing, enterprise risk management, or fraud investigations