IT Audit Senior

The
IT Audit Senior will be responsible for the execution of testing of IT general controls for existing and new SOC 1 and SOC 2 reports and IT SOX general controls across the mainframe, cloud
, and distributed environments.

• Workwith internal business leaders to understand the current mainframe, distributed, and AWS cloud environments to document controls in support of SOC and SOX scope.
• Fosterand maintain strong relationships throughout the company to support audit execution responsibilities. Viewed as a partner with IT and business leaders to understand the business and assist in designing and delivering the required audit services to meet business, customer, and regulatory requirements.
• Conduct assurance reviews and audits to evaluate the design and effectiveness of controls supporting the company’s business processes and information systems.
• Lead and execute all aspects of the audit process, including planning, risk assessment, controls identification, client coordination, fieldwork, data analysis, work paper documentation, reporting, and remediation validation, with direction from senior team members.
• Identify new and assess existing information technology control design and operating effectiveness, particularly related to application and infrastructure logical access, change management, and operations, as well as more common information security considerations.
• Evaluate root cause factors, extent of risk, and mitigating/compensating controls for audit testing exceptions and work with internal leaders to craft management responses for SOC reporting.
• Partner with the Project Manager to assess the adequacy of the corrective action(s) taken by management, stakeholders, or process owners to improve governance, risk management, and control issues.
• Discussaudit results, their impact,and recommendations for corrective actions with the Project Manager, external audit partners, and/or management.

• Bachelor’s degree in Accounting, Audit, Business Management, Information Technology, or Information Security.
• 3+ years of Public Accounting, Financial Services, or Financial Technology audit or other related work experience.
• Significant experience and expertise with common internal control frameworks and guidance, including Sarbanes-Oxley, SOC 1 and SOC 2 (readiness, type 1, and type 2 reports), and AICPA Trust Services Criteria for a SOC 2.
• Cloud security framework auditing (specifically as related to AWS).
• Mainframe auditing, including IT infrastructure design, management, operations, and security.
• CIA, CISA, CISM, CISSP, CCAK, CPA, or other relevant certifications.
• Ability for 10-15% travel.