Identify control deficiencies, assess associated risks, and recommend corrective actions
Lead and execute SOX ITGC testing supporting financial reporting requirements
Evaluate access management, change management, IT operations, automated controls, system-generated reports, and interfaces
Partner with IT, business process owners, compliance teams, and external auditors to support SOX requirements
Evaluate technology controls across enterprise applications, infrastructure, and supporting systems
Support control deficiency assessments, remediation planning, and follow-up testing
Identify opportunities to improve SOX processes, testing efficiency, documentation, and control effectiveness
Technology Risk & Cybersecurity
Conduct technology risk assessments across applications, infrastructure, cybersecurity, and operational resilience
Evaluate cloud environments, security configurations, identity and access management, and vulnerability management practices
Review controls against established frameworks including NIST, COBIT, and COSO
Assess IT governance, SDLC, technology implementations, and change management processes
Evaluate business continuity, disaster recovery, data protection, and incident response controls
Assess third-party technology risks, vendor controls, and SOC reports
Leadership & Stakeholder Management
Manage multiple IT audit engagements while maintaining timelines, quality standards, and priorities
Provide leadership, coaching, and technical guidance to audit team members
Partner with IT leadership, business stakeholders, risk, compliance, and other functions to identify and address technology risks
Prepare clear audit reports outlining findings, risk exposure, root causes, and recommended corrective actions
Present findings and recommendations to management and senior leadership
Track outstanding audit findings and monitor remediation activities
Identify opportunities to improve audit methodologies through automation, data analytics, and continuous improvement
Experience Requirements
Bachelor's degree in Accounting, Information Systems, Information Technology, Computer Science, Finance, or a related field
7+ years of progressive experience in IT audit, technology risk, internal audit, or IT compliance
Experience leading IT audit engagements and overseeing audit testing
Strong hands-on experience with SOX ITGC testing
Experience evaluating controls related to access management, change management, and IT operations
Experience evaluating IT Application Controls and automated controls
Knowledge of technology risk management, cybersecurity controls, and regulatory compliance
Experience conducting technology risk assessments and identifying control deficiencies
Experience supporting control remediation activities
Familiarity with internal audit and risk frameworks including COSO, COBIT, and NIST
Strong written and verbal communication skills with experience presenting audit findings to management
Ability to manage multiple priorities and work effectively across technical and nontechnical teams
Preferred Qualifications
Professional certification such as CISA, CIA, CPA, or CISSP
Public accounting, Big 4, consulting, or corporate internal audit experience
Experience within utilities, energy, financial services, or another highly regulated industry
Experience auditing enterprise platforms such as SAP or Oracle
Knowledge of cloud environments including AWS, Microsoft Azure, or Google Cloud
Experience evaluating cybersecurity programs, IT infrastructure, or major technology transformations
Exposure to Operational Technology (OT), Industrial Control Systems (ICS), or SCADA
Experience with audit management systems, GRC platforms, automation, or data analytics
Education Requirements
Bachelor's degree required.
