About This Role
Evaluating the design and operating effectiveness of IT general controls, application controls, and integrated business processes is the core of this IT Auditor role. The position delivers objective assessments for Sarbanes-Oxley (SOX) Section 404 compliance and partners with business units to remediate control deficiencies, protecting company assets and strengthening organizational governance.
Responsibilities
- Assist in evaluating technology risks by testing IT General Controls (ITGCs—such as logical access and change management) and automated application controls across enterprise systems
- Support Sarbanes-Oxley (SOX) Section 404 compliance activities (comprising roughly 60% of the role), including participating in walkthroughs, testing operating effectiveness, and preparing audit workpapers under team guidance
- Participate in operational and regulatory compliance audits (such as consumer privacy assessments) to help evaluate control design and identify non-financial process improvements
- Conduct structured client interviews with process and control owners across various departments to understand systems, ask probing questions, and follow up timely on audit requests
- Utilize Microsoft Excel to review system datasets, analyze text-file data dumps, and evaluate user access populations (such as Oracle user accounts) to verify appropriate permissions and identify exceptions
- Communicate audit testing status, potential control gaps, and factual findings clearly and constructively to audit leadership
Requirements
- Foundational understanding of IT systems, database concepts, or IT controls gained through degree coursework, academic projects, or internships
- Strong client-facing verbal and written communication skills, with the ability to learn and speak basic IT vocabulary when meeting with technical control owners
- Practical proficiency with spreadsheet tools (such as Microsoft Excel or Google Sheets) to import, filter, and review large datasets
- Professional skepticism, critical thinking, and the tact to ask clarifying questions and stand your ground respectfully when discussing audit observations
- Foundational curiosity and awareness of modern technology, including artificial intelligence (AI) tools and automated workflows
- Sound personal ethics, organizational habits, and the ability to balance multiple project deadlines in a collaborative team setting
- Bachelor’s Degree in Management Information Systems (MIS), Computer Science, Information Technology, Accounting, Finance, or a related field (recent and upcoming graduates are welcome to apply)
- 0 to 2 years of experience in IT audit, internal audit, corporate accounting, or relevant internship/collegiate project experience
- Foundational knowledge of computer systems, networks, or database concepts