Senior IT Auditor

Position Overview

We are seeking an experienced Senior IT Auditor to support an established Internal Audit team. This individual will execute risk-based IT audits, evaluate business processes and technology controls, identify risks, and develop audit findings and recommendations.

The ideal candidate has strong end-to-end IT audit experience beyond traditional SOX/IT testing, with the ability to independently assess unfamiliar systems, identify controls, and develop effective audit procedures.

*This role is Fully Remote*

Key Responsibilities

• Plan and execute risk-based IT audits, including scoping, risk assessments, control testing, and reporting.
• Conduct integrated audits and post-implementation reviews of enterprise applications.
• Evaluate business processes, system integrations, data flows, and internal controls.
• Identify risks and control gaps, develop testing procedures, and recommend improvements.
• Prepare detailed audit workpapers that clearly document testing procedures, evidence, and conclusions.
• Utilize Excel and data analytics to support audit testing and validate findings.
• Communicate audit results and recommendations to stakeholders.

Required Qualifications

• 5+ years of hands-on IT audit experience, including operational, integrated, or risk-based audits beyond SOX compliance.
• Experience independently managing audits from planning through execution and reporting.
• Strong understanding of audit methodologies, risk assessments, ITGCs, and internal controls.
• Ability to evaluate unfamiliar systems, identify risks, and develop audit procedures.
• Strong audit documentation and workpaper development experience.
• Advanced Excel skills and experience analyzing audit data.
• Strong critical thinking, problem-solving, and communication skills.

Preferred Qualifications

• Big Four or IT audit consulting background.
• CISA, CIA, CPA, or similar certification.
• Experience with application implementation audits, ERP systems, or BlackLine.
• Power Query or Optro experience.
• Exposure to data privacy, cybersecurity, or nontraditional IT audits.

Ideal Candidate

A seasoned auditor who can independently assess risks, identify controls, execute testing, and clearly document findings without relying on predefined audit programs.