IT Auditor

Position Overview

The IT Auditor is responsible for evaluating information technology controls, supporting SOX compliance activities, and assessing the effectiveness of IT-related internal controls and processes. This role focuses on IT Sarbanes-Oxley (SOX) audit procedures, including control testing, documentation, identifying control gaps, and communicating findings to relevant stakeholders.

The ideal candidate has hands-on experience with IT SOX audits, strong analytical and organizational skills, and excellent written and verbal communication abilities. The ability to work independently and collaborate effectively in a remote environment is essential. Professional certifications are beneficial but are not required, particularly for temporary assignments.

Key Responsibilities

IT SOX Auditing and Compliance

• Perform IT SOX audit procedures to assess the design and operating effectiveness of IT general controls (ITGCs).
• Evaluate controls related to user access management, change management, IT operations, and system security.
• Review IT control documentation, policies, procedures, and supporting evidence for compliance with SOX requirements.
• Conduct control testing and document results in accordance with established audit methodologies.
• Identify control deficiencies, gaps, and potential risks, and communicate findings to appropriate stakeholders.
• Assist with remediation tracking and follow-up testing to validate corrective actions.
• Support the preparation of audit workpapers, reports, and compliance documentation.

Risk Assessment and Internal Controls

• Assess IT-related risks that may affect financial reporting, data integrity, and regulatory compliance.
• Evaluate the effectiveness of internal controls and identify opportunities for improvement.
• Review relevant IT processes and supporting documentation to determine compliance with internal policies and control requirements.
• Maintain accurate and organized audit evidence to support conclusions and recommendations.
• Assist with resolving audit questions and addressing requests for additional documentation.

Documentation and Reporting

• Prepare clear, accurate, and well-organized audit workpapers and supporting records.
• Document audit procedures, testing results, identified exceptions, and conclusions.
• Communicate audit findings, control issues, and remediation needs to audit leadership and relevant business partners.
• Track outstanding requests, follow up on required documentation, and help ensure audit activities remain on schedule.
• Maintain confidentiality and handle sensitive business and IT information appropriately.

Collaboration and Remote Work

• Collaborate remotely with internal audit teams, IT personnel, control owners, and other stakeholders.
• Communicate audit requests, expectations, findings, and follow-up items clearly and professionally.
• Manage assigned responsibilities independently while meeting established deadlines.
• Participate in virtual meetings and provide timely status updates on audit progress.
• Maintain productivity, responsiveness, and effective coordination in a remote working environment.

Qualifications

Education and Experience

• Relevant experience in IT auditing, IT controls, internal audit, or IT compliance.
• Hands-on IT SOX audit experience is a key requirement for this role.
• Experience testing IT general controls, documenting audit evidence, and evaluating control effectiveness.
• Familiarity with SOX compliance requirements and IT control frameworks.
• Professional certifications such as CISA, CIA, or equivalent credentials are preferred but not required, particularly for temporary assignments.

Technical Skills

• Understanding of IT general controls, including access management, change management, and IT operations.
• Experience with audit testing, evidence collection, workpaper preparation, and control documentation.
• Ability to analyze information, identify control gaps, and document findings accurately.
• Proficiency with common productivity and collaboration tools.
• Ability to manage audit documentation and information securely in a remote environment.