Senior IT Auditor

Grow Your Career. Impact Lives. Shape the Future of Consumer Finance.

At Regional Finance, growth is more than a strategy. It's an opportunity for our people to thrive. Over the past several years, we have expanded significantly, creating new career paths, leadership opportunities, and professional development experiences across our organization.

As a proud NYSE-listed company, we serve more than half a million active customers through a network of 360+ branches across 20 states and a rapidly growing digital platform. With approximately $2.1 billion in net finance receivables, nearly double our position in 2020, our momentum reflects both the strength of our business and the dedication of our team.

If you're passionate about helping people, driven by growth, and excited to contribute to a company transforming the future of consumer finance, we invite you to join our team and build something meaningful with us.

Job purpose

The Senior IT Auditor is responsible for executing and supporting a range of internal audit activities under the direction of the Internal Audit Manager and Senior Manager Internal Audit, including SOX 404 testing (ITGCs, automated, etc.), data analysis, query code/logic review and testing, identifies deficiencies, and develops clear, well-supported audit conclusions. This role evaluates the efficiency and effectiveness of internal controls, ensures compliance with company policies and regulatory requirements, and provides value-added recommendations to improve process and strengthen controls.

This position also supports program activities including SOX scoping, risk assessment, planning, external auditor coordination, and continuous improvement. All audit work must be performed in a timely and high-quality manner while maintaining strong client relationships and demonstrating professional conduct at all times.

Duties and ResponsibilitiesSOX & Risk Assessment Support the IT SOX Manager in annual SOX planning, including scoping significant systems, applications, interfaces, reports, queries, and technology processes supporting financial reporting.

Execute testing of ITGCs, automated controls, IT-dependent manual controls, system-generated reports, key queries, and related technology controls, including walkthroughs, evidence requests, testing procedures, sampling, evaluation of results, and conclusions.

Identify control gaps, deficiencies, and process improvement opportunities, and clearly document issues, root causes, and potential impact.

Evaluate control design and operating effectiveness and maintain high-quality RACMs, narratives, flowcharts, walkthroughs, testing work papers, sampling documentation, and conclusions in accordance with Internal Audit methodology and SOX requirements.

Manage assigned activities to established timelines and quality expectations and escalate significant matters to the IT SOX Manager.

Key technology areas include, but are not limited to:

IT infrastructure and operations,ERP and enterprise applications,Cloud and SaaS environments,Identity and access management,SDLC/change management,Interfaces and system integrations,Cybersecurity and information security controls,Data governance and privacy,System implementations and conversions.

Data Analytics & Automation Perform advanced data analysis to support audit testing and risk identification using tools such as SQL, Python, Power BI, Excel, and visualization tools where applicable.

Extract, transform, and analyze large datasets to identify anomalies, control failures, trends, and operational inefficiencies.

Develop and enhance automated audit testing procedures to improve efficiency, coverage, and accuracy of audit work.

Support continuous auditing and monitoring initiatives through data-driven insights and repeatable analytic routines.

Technology Risk & Technical Expertise Apply strong technical knowledge when evaluating IT risks, control design, operating effectiveness, system dependencies, and financial reporting reliance across enterprise applications, ERP systems, cloud/SaaS, databases, infrastructure, interfaces, and integrations.

Evaluate application security, identity and access management, change management, system operations, data integrity, cybersecurity, and other ITGC areas supporting financial reporting.

Evaluate automated controls and system-generated information by considering underlying system logic, data sources, configurations, interfaces, and IT dependencies.

Assess SOC 1/SOC 2 reports and complementary user entity…