IT Compliance Auditor; No Sponsorship​/No Remote

Town Co., a premier retailer, is building a future‑ready IT audit function and is seeking an IT Compliance Auditor.

We are a premier retailer known for our commitment to innovation, quality, and customer service. We are preparing to transition into a publicly‑traded company within the next 6–12 months.

As our IT Compliance Auditor, you will design audit procedures to streamline evidence gathering and execute tests of IT General Controls (ITGC). You will leverage technical and automated tools to validate effectiveness of controls while moving beyond manual checklists. You will work closely with process owners, IT operations, and engineering teams to interpret system data, identify risks, and implement auditable technical solutions.

• Collaborate with external auditors to facilitate SOX IT General Controls (ITGC) testing, evidence gathering, and system walkthroughs.
• Administer the File Integrity Management solution (Tripwire) to monitor configuration and system changes, test controls, and maintain system integrity.
• Automate IT testing workflows (e.g., develop and execute Power Shell and Python scripts) for evidence collection.
• Partner with technical teams to remediate control gaps identified during SOX audits and implement corrective actions to prevent recurrence.
• Analyze system logs and event data to validate control performance and identify anomalies.
• Partner with business teams to identify manual control deficiencies and engineer automated improvements.
• Maintain comprehensive documentation for all audit workflows and scripts, ensuring transparency and repeatability.
• Support internal and external audits by utilizing self‑service tools for audit readiness.
• Ensure the integrity of audit trails and secure storage of audit evidence.
• Stay up to date with compliance requirements and ensure technical controls are aligned with them.

• Bachelor’s degree in Computer Science, Information Technology, Information Systems, or a related field.
• 2–5 years of experience in IT audit, GRC, or IT Engineering roles.
• Experience with Wrike or similar ticketing/project management tools.
• Proficiency with Fortra’s Tripwire Enterprise FIM solution.
• Strong working knowledge of Power Shell and Python for audit data analysis and automation.
• Experience analyzing and parsing system logs, event data, and access controls.
• Familiarity with directory services (e.g., Active Directory), logging platforms, and file systems.
• Familiarity with regulatory and compliance standards such as SOX, ISO 27001, and NIST.
• Strong documentation and process management skills.
• Ability to work independently and prioritize work across multiple audits and compliance initiatives.
• Excellent collaboration and communication skills, especially when working with engineering and non‑technical staff.

One or more of the following is preferred: CISA, CISSP, CIA, CRISC, CPA (with IT audit experience), CEH, COBIT Foundation, or ITIL Foundation/Practitioner.

• Competitive salary and comprehensive benefits package.
• A key role in our transition to becoming a publicly‑traded company.
• Opportunities to shape audit practices and leverage modern technology.
• A collaborative, forward‑thinking environment where your input drives real impact.