IT Senior Auditor

Location
:
Alpharetta, GA 30005 – Windward Campus (Hybrid Schedule)
Weekly Hours
: 40 Hours
Travel
: 10–15%, including some international travel

We are currently representing our client in the Fin Tech industry
, seeking an experienced Senior IT Auditor to join their growing Audit Services team on a direct hire basis
.

This Senior IT Auditor will be responsible for executing and supporting audits across SOC 1, SOC 2, and SOX IT environments
, including testing IT general controls across mainframe, cloud, and distributed systems
. This individual will lead key components of the audit lifecycle, including planning, risk assessment, control identification, testing, documentation, reporting, remediation follow-up, and stakeholder coordination.

The ideal candidate will bring strong experience with IT controls, SOC reporting, SOX compliance, information security, and cloud environments
, along with the ability to independently manage complex audit projects and build strong relationships across IT, business, and external audit teams.

• Lead and execute SOC 1, SOC 2, and SOX IT audit testing across mainframe, cloud, and distributed environments.

• Conduct assurance reviews and audits evaluating the design and operating effectiveness of business process and information technology controls.

• Manage key aspects of the audit lifecycle, including:

  • Planning and risk assessment

  • Control identification and documentation

  • Client and stakeholder coordination

  • Fieldwork and control testing

  • Data analysis

  • Work paper preparation and review

  • Audit reporting

  • Remediation and corrective action validation

• Develop a thorough understanding of business and IT processes and identify associated risks and internal controls.

• Test automated business process controls and IT general controls (ITGCs).

• Evaluate IT controls related to:

  • Logical access

  • Change management

  • IT operations

  • Application and infrastructure security

  • Information and data security

• Assess root causes, risk exposure, and mitigating or compensating controls associated with audit exceptions.

• Review audit work papers to ensure testing is documented accurately, consistently, and in accordance with audit standards.

• Coordinate audit activities with management, external auditors, and co-source providers.

• Discuss audit findings, business impact, and corrective action recommendations with project leadership and management.

• Track project timelines, milestones, deliverables, and audit status.

• Build strong relationships with business, technology, risk, and compliance stakeholders.

• Identify opportunities to continuously improve audit processes and internal controls.

• Provide guidance and support to other members of the Audit Services team during audit fieldwork.

• 3–5 years of relevant audit and/or risk management experience.

• Bachelor’s degree in Accounting, Auditing, Business Management, Information Technology
  , or a related field.

• Strong knowledge of auditing principles, practices, risk assessment, internal controls, and audit reporting.

• Significant experience with common internal control frameworks and guidance, including:

  • Sarbanes-Oxley (SOX)

  • SSAE 18

  • SOC 1 – Type I & Type II

  • SOC 2 – Type I & Type II

  • AICPA Trust Services Criteria

• Experience testing IT general controls, automated controls, and information security controls
  .

• Experience evaluating controls at the application, operating system, and database levels
  .

• Audit certification such as CIA, CISA, CISM, CISSP, CCAK, CPA
  , or another relevant certification.

• Strong project management skills with the ability to independently lead audit activities and manage competing priorities.

• Ability to prepare clear, concise, and accurate audit documentation and reports.

• 10–15% travel availability
  , including some…