About This Role
This IT Auditor role involves planning and executing IT and technology-risk audits as an individual contributor within Internal Audit. The focus is on IT control testing, data analytics, security compliance, AI governance, and third-party risk management. The auditor will assess alignment with various requirements, evaluate security posture, and present findings to management.
Responsibilities
- Develop and execute IT audit work based on identified risks and regulatory requirements, including obtaining background information on the function or system being audited, performing a risk and control assessment, defining audit scope and objectives, and engaging stakeholders
- Evaluate the design and effectiveness of IT controls, including IT general controls and application controls, to mitigate risks and support operational efficiency
- Perform audit tests including walkthroughs, interviews, data analysis, and other procedures as applicable
- Apply data analytics to scoping, population completeness, exception testing, and repeatable audit procedures
- Document audit work papers, findings, and recommendations in accordance with professional standards
- Ensure IT systems and processes comply with relevant regulations, standards (e.g., SOX, ISO, NIST), and internal policies
- Evaluate the security posture of IT systems, including identity and access management, data security, network security, cybersecurity, and vulnerability management
- Assess AI governance practices, including inventory awareness, acceptable use controls, data handling for AI tools, human oversight, and alignment with internal and regulatory expectations
- Perform TPRM-related audit work, including vendor control assessments, review of independent assurance reports, and evaluation of ongoing monitoring
- Conduct risk assessments related to emerging technologies, including cloud computing, big data, AI, and other relevant platforms
- Identify opportunities for improvement in IT processes and controls and provide recommendations to management in a scheduled manner
- Prepare and present clear and concise audit reports to management, highlighting key findings, risks, and recommendations
- Effectively communicate and collaborate with IT professionals, business leaders, Security, Procurement, and external auditors
- Track and follow up on the implementation of audit recommendations to ensure timely remediation of identified issues
- Coordinate and deliver assigned reviews in a timely, efficient, and cost-effective manner without compromising quality
- Stay abreast of emerging technologies, security threats, and regulatory changes to ensure audit
About the Company
Supermicro is a Top Tier provider of advanced server, storage, and networking solutions for Data Center, Cloud Computing, Enterprise IT, Hadoop/Big Data, Hyperscale, HPC and IoT/Embedded customers worldwide. It is among the fastest growing companies in Silicon Valley.
