IT Auditor

About This Role

This IT Auditor role involves planning and executing IT and technology-risk audits as an individual contributor within Internal Audit. The focus is on IT control testing, data analytics, security compliance, AI governance, and third-party risk management. The auditor will assess alignment with various requirements, evaluate security posture, and present findings to management.

Responsibilities

• Develop and execute IT audit work based on identified risks and regulatory requirements, including obtaining background information on the function or system being audited, performing a risk and control assessment, defining audit scope and objectives, and engaging stakeholders
• Evaluate the design and effectiveness of IT controls, including IT general controls and application controls, to mitigate risks and support operational efficiency
• Perform audit tests including walkthroughs, interviews, data analysis, and other procedures as applicable
• Apply data analytics to scoping, population completeness, exception testing, and repeatable audit procedures
• Document audit work papers, findings, and recommendations in accordance with professional standards
• Ensure IT systems and processes comply with relevant regulations, standards (e.g., SOX, ISO, NIST), and internal policies
• Evaluate the security posture of IT systems, including identity and access management, data security, network security, cybersecurity, and vulnerability management
• Assess AI governance practices, including inventory awareness, acceptable use controls, data handling for AI tools, human oversight, and alignment with internal and regulatory expectations
• Perform TPRM-related audit work, including vendor control assessments, review of independent assurance reports, and evaluation of ongoing monitoring
• Conduct risk assessments related to emerging technologies, including cloud computing, big data, AI, and other relevant platforms
• Identify opportunities for improvement in IT processes and controls and provide recommendations to management in a scheduled manner
• Prepare and present clear and concise audit reports to management, highlighting key findings, risks, and recommendations
• Effectively communicate and collaborate with IT professionals, business leaders, Security, Procurement, and external auditors
• Track and follow up on the implementation of audit recommendations to ensure timely remediation of identified issues
• Coordinate and deliver assigned reviews in a timely, efficient, and cost-effective manner without compromising quality
• Stay abreast of emerging technologies, security threats, and regulatory changes to ensure audit

About the Company

Supermicro is a Top Tier provider of advanced server, storage, and networking solutions for Data Center, Cloud Computing, Enterprise IT, Hadoop/Big Data, Hyperscale, HPC and IoT/Embedded customers worldwide. It is among the fastest growing companies in Silicon Valley.