IT Analyst - Audit, Risk, and Controls

About Nscale

• Nscale is the GPU cloud engineered for AI. We provide cost-effective, high-performance infrastructure for AI
• startups and large enterprise customers. Nscale enables AI-focused companies to achieve superior results by
• reducing the complexity of AI development. Our GPU cloud bolsters technical capabilities and directly supports
• strategic business outcomes, including cost management, rapid innovation, and environmental responsibility.
• We thrive on a culture of relentless innovation, ownership, and accountability, where every team member
• takes pride in their work and drives it with excellence and urgency. As an Nscaler, you'll build trust through
• openness and transparency, where everyone is inspired to do their best work.

About the Role

• The Analyst, Audit, Risk & Controls supports Nscale's internal control environment across IT SOX, internal
• audit, business process reviews, and enterprise risk management. Working within the Finance team and
• reporting to the Director, Audit, Risk & Controls, this is a hands-on role covering control design, testing,
• documentation, and ongoing monitoring across both IT and business process domains.
• This is a deliberately broad role. Depending on the candidate's background, the primary focus may sit closer to
• IT general controls and systems, or to business process controls and financial reporting. We expect to hire
• more than one person and welcome applicants from both profiles.

What You'll Be Doing

IT SOX & General Controls

• Support the design, documentation, and testing of IT general controls (ITGCs) across in-scope systems
• Perform walkthroughs and test design and operating effectiveness of controls covering access

management, change management, SDLC, and backup & recovery

• Maintain and update ITGC documentation, control matrices, and testing workpapers
• Support user access reviews, segregation of duties (SoD) assessments, and role-based access

management processes

• Assist in identifying, tracking, and remediating IT control gaps and deficiencies
• Contribute to system implementation reviews and ITGC scoping for new platforms entering the control

environment

Internal Audit

• Support delivery of the internal audit plan across IT and business process areas, including scoping,

fieldwork, and reporting

• Prepare and maintain audit workpapers, findings, and management action plans
• Track and follow up on open audit recommendations and remediation progress
• Assist in audit readiness activities and support coordination with external auditors on information

requests and testing

Business Process Controls

• Conduct process walkthroughs and as-is documentation for key financial and operational processes
• Support the design and testing of business process controls for SOX and internal audit purposes
• Identify control weaknesses, process inefficiencies, and improvement opportunities
• Perform internal controls impact assessments for new systems, process changes, or organisational

developments

• Assist in the design and implementation of controls arising from business initiatives or transformation

projects

Enterprise Risk Management

• Support the maintenance and monitoring of the risk register, including tracking of key risk indicators and

control owners

• Contribute to periodic risk assessments and assist in identifying emerging risks relevant to IT, financial

reporting, and operations

• Help embed risk and control awareness across the business by supporting documentation, reporting,

and stakeholder engagement

• Assist in aligning control frameworks and audit findings with the broader ERM programme

Collaboration & Reporting

• Work closely with control owners across Finance, IT, and Operations to gather evidence and support

control activities

• Communicate control requirements and findings clearly to both technical and non-technical

stakeholders

• Contribute to ARC team reporting, dashboards, and status updates for senior stakeholders
• Support ad hoc risk, compliance, and controls projects as required by the ARC leadership team

What We're Looking For

Education & Experience

• 2.5 – 5 years of experience in IT audit, external audit, or internal audit — ideally from a Big 4 or

equivalent firm

• Exposure to SOX compliance programmes, including ITGC and/or business process control testing
• Experience working with ERP or enterprise systems (e.g. NetSuite, SAP, Oracle, Workday)
• Familiarity with control frameworks such as COSO and COBIT
• Bachelor's degree in Information Technology, Accounting, Finance, or a related field (or equivalent

experience)

Technical Skills

• Working knowledge of IT general controls and their application in a SOX or internal audit context
• Understanding of access management, user provisioning, and SoD concepts
• Familiarity with ERP systems and financial applications
• Awareness of IT audit tools, testing methodologies, and basic system security principles

Professional Skills

• Strong analytical and problem-solving skills with attention to detail
• Able to operate across both IT and business process domains
• Clear written and verbal communication skills — comfortable presenting findings to non-technical

stakeholders

• Organised and self-directed, able to manage multiple tasks in a fast-paced, high-growth environment
• Collaborative and relationship-oriented, with the ability to work effectively across functions

Preferred Qualifications

• Professional qualification in progress or achieved: ACA, ACCA, CISA, CIA, or equivalent
• Experience with audit or compliance management platforms (e.g. Workiva, AuditBoard)
• Knowledge of data governance or information security frameworks
• Experience in technology, financial services, or other regulated industries

For information on how Nscale handles candidate personal data, please see our Employee &