IT Senior Auditor

Role Overview

At this time, we are unable to offer visa sponsorship for this position. Candidates must be legally authorized to work for any employer in the United States (or applicable country) on a full-time basis without the need for current or future immigration sponsorship.

Summary of This Role:
Conduct operational, compliance, and financial audit and advisory engagements of domestic and/or international operations and provide sound project management. Lead the planning and execution, reporting and follow‑up of audit engagements. Develop, monitor and assist in executing the testing strategy for audit engagements.

• Conduct assurance reviews and audits to evaluate the design and effectiveness of controls supporting the company’s business processes and information systems.
• Lead and execute all aspects of the audit process, including planning, risk assessment, controls identification, client coordination, fieldwork, data analysis, work paper documentation, reporting, and remediation validation, with direction from senior team members.
• Understand business and IT processes to identify risks and evaluate internal controls.
• Document thorough understanding of business processes, including the role of technology in supporting the process.
• Effectively perform testing of automated business process controls and IT general controls.
• Assess information technology design and operating effectiveness, particularly related to application and infrastructure logical access, change management, and operations, as well as more common information security considerations.
• Evaluate root‑cause factors, extent of risk, and mitigating/compensating controls for audit testing exceptions.
• Provide first‑level detail review of work paper documentation to ensure audit testing work papers are documented in a consistent and high‑quality manner while executing project tasks in adherence to established timelines.
• Partner with the project manager to assess the adequacy of corrective action(s) taken by management, stakeholders, or process owners to improve governance, risk management, and control issues.
• Track and report project status and milestones to project leadership and/or management.
• Discuss audit results, their impact and recommendations for corrective actions with the project manager, external audit partners, and/or management.
• Build and develop Audit Services Group’s brand within the company through meaningful relationship building.
• Coordinate audit activities with management, co‑source providers and external auditors.
• Enable continuous improvement of the Audit Services Group by identifying and communicating enhancement opportunities to department leadership.
• Support the development of other team members within the Audit Services Group.

• 3‑5 years of relevant audit and risk management experience.
• Knowledge of auditing principles and practices, and the analysis and reporting of audit information.
• Knowledge of IPPF Standards, IIA best practices, auditing principles and practices, as well as the analysis and reporting of audit information.
• Bachelor’s degree in Accounting, Auditing, Business Management, Information Technology, or other similar degrees.
• Significant experience and expertise with common internal control frameworks and guidance, including Sarbanes‑Oxley, SSAE
  18 (SOC1 and SOC2, both type1 and type2 reports), and
  2017
  
  AICPA Trust Services Criteria for a SOC
  2.
• Certification(s) such as CIA, CISA, CISM, CISSP, CCAK, CPA, or other relevant certification(s).
• Big Four audit experience preferred.
• 10‑15% travel requirement, including some international travel.

• Experience with multiple internal control frameworks, including NIST, Cloud Controls Matrix, AWS Cloud Adoption Framework, COBIT, FFIEC, PCI‑DSS, ISO
  27001, and ITIL.
• Experience with Big Four or similar firm audit experience.
• Experience in Card Issuing, Payment Processing, Financial Services industry, Merchant Acquiring, and Consumer and Business Financial Solutions.

• Audit and/or consulting experience in information technology controls, including access controls, systems development and change…