IT Audit Senior Associate | Internal Audit | Risk Advisory

About CBIZ Risk & Advisory Services

The CBIZ Risk & Advisory Services (RAS) group offers consulting, outsourcing and co‑sourcing services to public and private companies of all sizes by providing national‑caliber expertise combined with highly personalized service. As part of CBIZ (NYSE: CBZ), one of the top financial services providers in the country, the Risk & Advisory Services group provides internal audit, Sarbanes‑Oxley compliance, cybersecurity, supply chain management, vendor management, business continuity planning, and risk consulting services to leading businesses across North America.

CBIZ RAS group is seeking an experienced, motivated, and detail‑oriented IT Audit Senior Associate to support the execution of internal audits with a focus on IT General Controls (ITGCs) and Sarbanes‑Oxley (SOX) IT compliance. This position reports to the IT Audit Manager or Senior Manager and follows a hybrid work schedule. In this role, you will perform audit procedures, evaluate control effectiveness, and prepare high‑quality documentation under the guidance of audit leadership.

The ideal candidate will have a strong foundation in IT risk and controls, excellent analytical skills, and the ability to collaborate effectively with internal team members and cross‑functional stakeholders, while communicating clearly and professionally with both colleagues and clients.

As an IT Audit Senior Associate, you will be a vital member of the Information Technology consulting practice within the RAS team, delivering exceptional service to clients across a variety of industries. You’ll have the opportunity to work with some of the most entrepreneurial and innovative companies in the country – organizations that are driving growth and shaping the future of business in America.

• Perform and document testing of IT processes related to Sarbanes‑Oxley compliance and internal audit plans, including areas such as Logical Access, Change Management, and Computer Operations. Evaluate the adequacy and effectiveness of internal controls and identify control gaps or non‑compliance with internal policies. Draft audit findings for management review.
• Develop and maintain key audit documentation including process narratives, risk and control matrices, test plans, and lead sheets. Ensure documentation reflects current processes and aligns with organizational and professional audit standards.
• Coordinate and conduct audit activities, including process walkthroughs, evidence collection and organization, and audit status updates. Assist in preparing clear and concise audit reports that communicate control issues, risk/business impact, and recommended action plans.
• Support project management efforts by assisting with team member testing assignments, resource planning, budget tracking, and client status meetings. Collaborate with project managers to keep audit work on track and aligned with objectives.
• Train, supervise, and review the work of junior team members, providing timely and constructive feedback to support their professional development and ensure quality deliverables.
• Serve in consultative role for clients seeking third‑party assessments of their IT environment.
• Perform additional responsibilities as assigned, contributing to department initiatives and continuous improvement efforts.
• 3 days in office or at client site required.

• Bachelor’s degree in Accounting, Finance or Information Technology
• 3-5 years of experience in public accounting or publicly traded organization’s internal audit or IT department
• CISA, CIA or similar relevant certification
• Understanding of ERP systems and financial systems
• Ability and experience in performing SOX audits (document process flows/narratives, assess design/operational effectiveness of internal controls)
• Knowledge of Sarbanes‑Oxley legislation and impact, COBIT and COSO
• Strong project management skills and ability to meet work‑plan specifications and deadlines
• Ability to clearly communicate verbally and in writing throughout all levels of organizations, both internally and externally
• Strong documentation skills including detailed…