Senior Auditor (IT Systems & Controls)

Join our Internal Audit function as a Senior Auditor - IT Systems and Controls. You will independently execute IT SOX testing, review testing performed by co-sourced or junior team members, and engage with engineering, IT, and security teams. Your responsibilities will include planning and executing SOX testing, conducting walkthroughs, reviewing testing work, coordinating evidence collection, identifying control deficiencies, and maintaining documentation. You will also execute internal audit and advisory projects, assess control deficiencies, collaborate with stakeholders, and prepare reports and communication materials.

• Plan, execute, and document SOX testing for IT General Controls (ITGCs), IT Automated Controls, and Key Reports across assigned in-scope systems.
• Conduct walkthroughs and design/effectiveness testing of IT controls across homegrown and third-party systems, engaging directly with control owners and engineering leads.
• Serve as the day-to-day point of contact for IT, Engineering, and Security teams on IT SOX and assurance activities for assigned systems.
• CISA strongly preferred; CISSP, CPA, or CIA a plus
• Deep expertise in ITGCs, IT Automated Controls, key report testing, and their relevance to ICFR, internal audit methodology, and IIA standards
• Excellent communication and interpersonal skills to effectively engage with, and influence, both technical and non-technical senior stakeholders
• Experience independently leading audits of both homegrown business systems and third-party SaaS applications
• Big Four accounting firm or equivalent experience in Internal or External Audit or IT consulting practice, including experience reviewing and directing the work of junior staff
• Proven ability to review and quality-check the work of junior team members or co-sourced resources, even without formal direct reports
• Bachelor’s degree in Information Systems, Computer Science, Accounting, or related field
• Organized, detail-oriented, and able to manage multiple concurrent engagements in a dynamic, fast-growth environment with minimal oversight
• Demonstrated experience in data governance, system implementation reviews, and cybersecurity risk assessments
• Experience working with audit management tools (e.g., AuditBoard, Archer, Workiva) to manage SOX and IT compliance programs
• Strong analytical and technical skills with the ability to independently evaluate IT and data risks across complex environments
• 8+ years of progressive experience in IT audit, IT risk, or IT SOX compliance, at a level equivalent to Manager at a Big Four accounting firm, or an internal audit professional with comparable scope and seniority in industry
• Experience with data analytics and automated testing tools (e.g., SQL, Python, ACL, Power BI) to enhance SOX testing efficiency and insights
• Exposure to emerging technologies such as cloud computing, cybersecurity, and RPA, and their control implications
• Prior experience working in a fast-growth or pre-IPO organization, building or scaling a SOX program ahead of public-company readiness
• Familiarity with cybersecurity frameworks (e.g., NIST, ISO 27001, COBIT) and their application to IT risk management
• Experience auditing engineering practices such as GitHub-based change management, CI/CD pipelines, or internally managed databases
• Prior involvement in system implementation or upgrade reviews for ERP, financial systems, or homegrown applications
• Experience presenting findings to senior leadership or an Audit Committee