IT Auditor

About the Role

Under the direct supervision of the Manager of IT Audit, the IT Auditor will be responsible for providing high‑quality internal audits that ensure procedural and regulatory standards are met. The IT Auditor will follow the Internal Audit Policies and Procedures aligned with the Institute of Internal Auditors (IIA) International Standards for the Professional Practice of Internal Auditing and will serve as a value‑added resource in designing and executing assurance responsibilities to help the organization achieve its objectives.

• Medical, Dental, Vision, Life and Disability Insurance
• 401(k) with company match
• Pre‑tax spending accounts including health care FSA and commuter savings
• Flexible paid time off
• Professional development reimbursement and ongoing skills training opportunities
• Employee resource groups
• Swag, ticket giveaways, and more!

• Assist Internal Audit leadership with maintaining a compliant Internal Audit methodology, including all supporting materials (e.g., policies, procedures, workpaper standards, charters, etc.) and oversight/governance structure.
• Perform internal audit IT engagements and assessments as determined in the approved annual Internal Audit Plan, evaluating IT General Controls, Application Controls, Network Controls, IT security related Internal Controls and focusing on complex, judgemental and/or specialized issues.
• Take responsibility for multiple engagement assignments by using time wisely, prioritizing tasks according to risk and feedback from supervisor/management, and bringing assignments to completion within established time frames with limited supervision.
• Assist with audit risk assessments of Information Technology processes and systems, planning, and developing audit programs to ensure the business has adequate internal controls.
• Ensure the audit scope is accurately defined and audit procedures achieve the completion of that scope.
• Collect information, IT policies and procedures and perform detailed assessments of information technology systems and infrastructures to verify systems are secure and support the related applications or business processes and are in compliance with security standards and regulations.
• Prepare clear, accurate, and well‑organized audit work papers that appropriately document the testing performed, including planning documents, engagement notifications, source documentation, flowcharts, walkthroughs of processes, and testing of controls.
• Assess audit results and develop meaningful recommendations for improvement which can be effectively implemented by management given the existing business, control risks, and other cost/benefit considerations.
• Prepare audit reports that reflect audit results and recommend opportunities for improvement to processes, partnering with management to develop action plans and monitor and test remediation.
• Continuously look for opportunities to improve, by simplifying processes and developing better ways of working with different teams across the organization.
• Complete audit assignments within established time frames.
• Perform any additional job responsibilities requested by the Manager of IT Audit.
• Develop a thorough understanding of the Company’s operations and serve as a subject matter expert of applicable IT and cybersecurity standards.
• Maintain professional and technical knowledge by attending professional association workshops and training, reviewing professional publications, and maintaining/obtaining relevant certifications.
• Travel to other locations for auditing and training purposes, as required (