Compare your current skills to what this opportunity needs—we'll show you what you already have and what could strengthen your application.
Job Description
Description We are seeking an experienced Senior IT Auditor with active CISSP and CISA certifications to lead complex IT general controls (ITGC), application, infrastructure, and emerging technology audits. This role combines deep technical expertise with risk-based auditing to assess the design and operating effectiveness of controls across cloud platforms, cybersecurity programs, data governance, and third-party ecosystems. The ideal candidate thrives in dynamic environments, communicates findings to executive leadership, and drives remediation in partnership with IT, security, and business stakeholders. Key Responsibilities + Lead end-to-end IT audits including planning, scoping, fieldwork, testing (design & operating effectiveness), and reporting for
SOX 404, SOC 2, ISO
27001, NIST, and internal risk-based audits. + Evaluate ITGCs across ERP systems (SAP, Oracle, NetSuite), cloud environments (AWS, Azure, GCP), Active Directory, databases, and network infrastructure. + Perform integrated audits combining financial, operational, and IT controls with cross-functional audit teams. + Assess cybersecurity controls (identity/access management, encryption, vulnerability management, incident response, zero trust architecture). + Conduct third-party risk assessments and review vendor SOC reports, contracts, and SLA compliance. + Identify control gaps, quantify risk, and draft actionable, prioritized recommendations. + Present audit findings and remediation plans to C-suite, Audit Committee, and Board-level stakeholders. + Mentor junior auditors and co-source resources; review workpapers for quality and completeness. + Stay ahead of emerging risks: AI/ML governance, quantum computing threats, ransomware frameworks, and GenAI security. + Support data analytics in audits using tools like ACL, IDEA, Power BI, or Python/SQL for continuous auditing. Requirements + Bachelor's degree in Information Systems, Computer Science, Accounting, or related field. + Active CISSP and CISA certifications (both required). + 5-8+ years of IT audit experience (Big 4 or large corporate internal audit preferred). + Hands-on experience auditing: + Cloud platforms (AWS, Azure, GCP) + ERP systems (SAP S/4HANA, Oracle EBS/Fusion) + Cybersecurity frameworks (NIST
CSF, CIS
Controls, ISO 27001) + ITGCs, automated controls, and segregation of duties (SoD) + Expertise in SOX 404 compliance and PCAOB audit standards. + Advanced knowledge of
