IT Audit Associate - Digital Risk Services

Elliott Davis pairs forward-thinking tax, assurance and consulting services with industry-leading workplace culture. Our nine offices — located in the fastest growing cities in the US — are built on a foundation of inclusivity, collaboration, and collective growth. We work daily to provide exceptional service to our people, customers, and our communities. Audit and assurance services are provided by Elliott Davis, LLC (doing business in NC and D.C. as Elliott Davis, PLLC), a licensed CPA firm.

The IT Audit Associate supports the execution of IT audit, technology risk, and assurance engagements. Working as part of an engagement team, the Associate assists in understanding technology environments, identifying and assessing technology risks, evaluating the design and operating effectiveness of controls, and documenting audit procedures and conclusions. The Associate will gain hands‑on experience with IT General Controls (ITGCs), automated and application controls, key reports, SOC reports, and other technology‑dependent controls.

This role provides opportunities to work directly with client personnel, develop technical and professional skills, and build a strong foundation in IT audit, technology risk, and assurance.

Assist in the planning and execution of IT audit, technology risk, and assurance engagements, including IT General Controls (ITGCs), internal IT audits, SOX 404 support, SOC 1 and SOC 2 engagements, and other technology risk assessments. Develop an understanding of clients' business processes, technology environments, systems, infrastructure, and relevant technology risks and controls. Participate in process and control walkthroughs with client stakeholders to understand and document technology processes and control environments.

Assist in identifying technology risks and the controls designed to mitigate those risks, including their impact on business processes and the financial reporting control environment, as applicable. Perform procedures to evaluate the design, implementation, and operating effectiveness of technology controls under the guidance of senior engagement team members. Test ITGCs across enterprise applications, infrastructure, and cloud environments, including relevant logical access, change management, and IT operations controls.

Assist with testing automated controls, application controls, key reports, interfaces, and other IT‑dependent controls supporting business processes and audit objectives. Review SOC 1 and SOC 2 reports for third‑party service providers and assist in evaluating relevant control objectives, complementary user entity controls, exceptions, and their impact on the client's control environment.

Support technology advisory and risk engagements associated with system implementations, technology initiatives, and significant process or system changes. Analyze audit evidence and assist in identifying potential control deficiencies, technology risks, and process improvement opportunities. Assist the engagement team in developing practical recommendations to strengthen controls, mitigate risks, and improve processes. Prepare clear, accurate, and well‑supported audit work papers in accordance with applicable methodology, professional standards, and engagement requirements.

Obtain, organize, and evaluate client documentation and audit evidence for accuracy, completeness, and relevance. Document walkthroughs, testing procedures, evidence obtained, results, and conclusions in a clear and concise manner. Apply professional skepticism and sound judgment when performing assigned audit procedures. Identify exceptions, unusual circumstances, or potential issues…