IT Compliance Auditor; No Sponsorship​/No Remote

About Us

We are a premier retailer known for our commitment to innovation, quality and customer service. We are preparing to transition into a publicly-traded company within the next 6–12 months, and are building a future-ready IT audit function that emphasizes automation, efficiency, and compliance with SOX and regulatory requirements.

As our IT Compliance Auditor, you will be responsible for designing audit procedures to streamline evidence gathering and executing tests of IT General Controls (ITGC). You will leverage technical and automated tools to validate effectiveness of controls, while moving beyond manual checklists. You will work closely with process owners, IT operations and engineering teams to interpret system data, identify risks, and implement auditable technical solutions.

This role is ideal for a professional who combines strong audit & compliance fundamentals, with a mind for designing innovative processes to streamline compliance requirements.

• External Audit
  
  Collaboration:
  
  Collaborate with external auditors to facilitate SOX IT General Controls (ITGC) testing, evidence gathering, and system walkthroughs.
• Tripwire Administration:
  Utilize our File Integrity Management solution to monitor configuration and system changes, used to test controls and maintain the integrity of systems throughout the IT environment.
• Automated ITGC Execution:
  Automate ITGC testing workflows (e.g., develop and execute Power Shell and Python scripts) for evidence collection.
• Remediation Engineering:
  Partner with technical teams to remediate control gaps identified during SOX audits and implement corrective actions to prevent recurrence.
• Log Analysis:
  Analyze system logs and event data to validate control performance and identify anomalies.
• Process Improvement:
  Partner with business teams to identify manual control deficiencies and engineer automated improvements.
• Documentation:
  Maintain comprehensive documentation for all audit workflows and scripts, ensuring transparency and repeatability.
• Audit Readiness:
  Support internal and external audits by utilizing self‑service tools for audit readiness.
• Data Integrity:
  Ensure the integrity of audit trails and secure storage of audit evidence.
• Compliance Monitoring:
  Stay up to date with compliance requirements and ensure technical controls are aligned with them.

• Education
  :
  Bachelor’s degree in Computer Science, Information Technology, Information Systems, or a related field.
• Experience
  : 2–5 years of experience in IT audit, GRC, or IT Engineering roles.
• Preferred Experience
  :
  Experience with Wrike or similar ticketing/project management tools.
• Technical Aptitude
  • Proficiency with Fortra’s Tripwire Enterprise FIM solution
  • Strong working knowledge of Power Shell and Python for audit data analysis and automation.
  • Experience analyzing and parsing system logs, event data, and access controls.
  • Familiarity with directory services (e.g., Active Directory), logging platforms, and file systems.
• Compliance
  :
  Familiarity with regulatory and compliance standards such as SOX, ISO 27001, and NIST.
• Soft Skills
  • Strong documentation and process management skills.
  • Ability to work independently and prioritize work across multiple audits and compliance initiatives.
  • Excellent collaboration and communication skills, especially when working with engineering and non‑technical staff.
• Preferred Certifications
  :
  One or more of the following is preferred: CISA, CISSP, CIA, CRISC, CPA (with IT audit experience), CEH, COBIT Foundation, or ITIL

• Competitive salary and comprehensive benefits package.
• A key role in our transition to becoming a publicly‑traded company.
• Opportunities to shape audit practices and leverage modern technology.
• A collaborative, forward‑thinking environment where your input drives real impact.