About This Role
This IT Auditor role involves conducting independent and structured audits across internal systems, platforms, and third-party entities, covering the full audit cycle from preparation to remediation follow-up. The position suits a highly analytical and detail-oriented professional with strong experience in IT Audit, IT Compliance, QA, or ISO Implementation/Audit/Certification, and a solid understanding of IT General Controls, application controls, security compliance, and data privacy.
Responsibilities
- Lead and execute internal and external IT audits covering systems, platforms, system integrations, ISO management systems, security compliance, and data privacy requirements
- Assess infrastructure, system configurations, access controls, IT General Controls (ITGC), and application controls against established audit criteria
- Identify control weaknesses, control bypasses, unauthorized activities, security risks, and areas of non-compliance
- Validate the integrity, completeness, and reliability of audit evidence and trace data back to source systems when necessary
- Investigate anomalies, gaps, inconsistencies, or potential misrepresentation through evidence-based analysis and root cause investigation
- Conduct pre-audit preparation, system readiness checks, functional testing, and user/identity verification based on audit checklists and applicable standards
- Prepare and maintain accurate audit working papers, findings, test results, and supporting documentation
- Clearly document audit findings and recommendations for management and regulatory review
- Escalate high-risk findings and conduct follow-up investigations to validate corrective actions and remediation
- Participate in post-audit debriefs and assist in preparing final audit reports
- Contribute to the continuous improvement of audit methodologies, processes, checklists, and documentation standards
- Maintain auditor independence and ensure there are no conflicts of interest with systems, processes, or teams being assessed
- Ensure strict confidentiality and proper handling of sensitive systems, credentials, business information, and audit evidence
Requirements
- Bachelor’s degree in Computer Science, Information Technology, Information Systems, Engineering, or a related field; equivalent practical experience may also be considered
- At least 5 years of relevant experience in:
- IT Audit
- IT Compliance
- Quality Assurance (QA)
- ISO Implementation, Audit, or Certification
- Strong working knowledge of:
- IT General Controls (ITGC)
- Application Controls
- Access and Security Controls