Senior Auditor

Responsibilities

• Execute end-to-end IT audits, including IT General Controls (ITGCs), application controls, and key report validation
• System mapping, data flows, interfaces, and infrastructure controls
• Assess control design and effectiveness across areas such as Cloud (AWS, Azure), infrastructure, and platforms
• SDLC, Agile, Dev Ops, and CI/CD pipelines
• ITIL processes and service management
• Identify control gaps, operational deficiencies, and root causes of risk exposure
• Collaborate with audit teams and stakeholders to define audit scope, objectives, and risk coverage
• Develop and execute risk-based test plans, including for emerging technologies
• Analyze technical configurations, process documentation, and data to support audit conclusions
• Identify risks arising from inadequate processes, systems, or human factors
• Provide practical, solution-oriented recommendations to mitigate risk and improve controls
• Support the development and sustainability of effective risk management frameworks
• Escalate risks appropriately and contribute to forward-looking risk identification
• Serve as a functional liaison between Technology, Line of Business, and Lines of Defense
• Build relationships with stakeholders, including senior management, to communicate audit scope, status, and results
• Deliver insights in a clear, concise, and business-relevant manner
• Manage multiple audit assignments in a fast-paced, dynamic environment
• Identify opportunities to enhance audit methodologies, processes, and tools
• Ensure alignment with applicable laws, regulations, and internal policies

• Bachelor's degree, or equivalent work experience
• Typically more than five years of applicable experience
• 3–7+ years of experience in Technology Audit, IT Risk, Internal Audit, or Consulting
• Foundational to strong understanding of IT risks, controls, and audit methodologies
• Experience with Cloud computing (AWS, Azure), infrastructure, and networking
• Experience with APIs, system integrations, data protection, and authentication protocols
• Experience with Databases, Active Directory, and emerging technologies (e.g., AI)
• Familiarity with industry frameworks (COBIT, NIST, ITIL, ISO standards)
• Strong analytical skills, including data analysis and root cause identification
• Ability to manage competing priorities and deliver under tight timelines
• Excellent written and verbal communication skills, with ability to translate technical risks into business insights
• Professional certifications preferred (e.g., CISA, CIA, CISSP, CPA, AWS, Azure)