Senior IT Auditor

Take your career to the next level! In the last few years our goal has been expansion, creating growth opportunities for many of our team members. Not only are we serious about growth, but we are also serious about helping our customers during hard financial times.

We take pride in providing solutions and offering a helping hand, not only to our customers but also to the communities we serve. As we continue to expand and grow into a national leader in consumer financing, we invite you to consider joining our team.

If you're passionate about making a meaningful impact in people's lives and bringing a personal touch to finance, we'd love to have you on board!

Job purpose

The Senior IT Auditor is responsible for executing and supporting a range of internal audit activities under the direction of the Internal Audit Manager and Senior Manager Internal Audit, including SOX 404 testing (ITGCs, automated, etc.), data analysis, query code/logic review and testing, identifies deficiencies, and develops clear, well-supported audit conclusions. This role evaluates the efficiency and effectiveness of internal controls, ensures compliance with company policies and regulatory requirements, and provides value-added recommendations to improve process and strengthen controls.

This position also supports program activities including SOX scoping, risk assessment, planning, external auditor coordination, and continuous improvement. All audit work must be performed in a timely and high-quality manner while maintaining strong client relationships and demonstrating professional conduct at all times.

Duties and ResponsibilitiesSOX & Risk Assessment Support the IT SOX Manager in annual SOX planning, including scoping significant systems, applications, interfaces, reports, queries, and technology processes supporting financial reporting.

Execute testing of ITGCs, automated controls, IT-dependent manual controls, system-generated reports, key queries, and related technology controls, including walkthroughs, evidence requests, testing procedures, sampling, evaluation of results, and conclusions.

Identify control gaps, deficiencies, and process improvement opportunities, and clearly document issues, root causes, and potential impact.

Evaluate control design and operating effectiveness and maintain high-quality RACMs, narratives, flowcharts, walkthroughs, testing work papers, sampling documentation, and conclusions in accordance with Internal Audit methodology and SOX requirements.

Manage assigned activities to established timelines and quality expectations and escalate significant matters to the IT SOX Manager.

Key technology areas include, but are not limited to:

IT infrastructure and operations,ERP and enterprise applications,Cloud and SaaS environments,Identity and access management,SDLC/change management,Interfaces and system integrations,Cybersecurity and information security controls,Data governance and privacy,System implementations and conversions.

Data Analytics & Automation Perform advanced data analysis to support audit testing and risk identification using tools such as SQL, Python, Power BI, Excel, and visualization tools where applicable.

Extract, transform, and analyze large datasets to identify anomalies, control failures, trends, and operational inefficiencies.

Develop and enhance automated audit testing procedures to improve efficiency, coverage, and accuracy of audit work.

Support continuous auditing and monitoring initiatives through data-driven insights and repeatable analytic routines.

Technology Risk & Technical Expertise Apply strong technical knowledge when evaluating IT risks, control design, operating effectiveness, system dependencies, and financial reporting reliance across enterprise applications, ERP systems, cloud/SaaS, databases, infrastructure, interfaces, and integrations.

Evaluate application security, identity and access management, change management, system operations, data integrity, cybersecurity, and other ITGC areas supporting financial reporting.

Evaluate automated controls and system-generated information by considering underlying system logic, data sources, configurations, interfaces, and IT dependencies.

Assess SOC 1/SOC 2 reports and complementary user entity controls, as applicable, and participate in assessments involving cybersecurity, cloud adoption, system implementations, AI, automation, and other emerging technologies.

Use data analytics, automation, and technology-enabled audit techniques to improve testing…