IT Audit Associate - Digital Risk Services

Digital Risk Services It Audit Associate

The Digital Risk Services IT Audit Associate supports the planning, execution, and completion of information technology audit and advisory engagements. The position works with engagement teams and clients to understand technology environments, obtain and evaluate audit evidence, test controls, document results, and communicate exceptions. Engagements may include IT general control audits, bank IT audits using Federal Financial Institutions Examination Council guidance, and Sarbanes-Oxley information technology control audits.

The role is designed for an entry-level or experienced associate who can take on increasing responsibility as skills and experience develop.

• Assist with planning and performing IT audits, including documenting the technology environment, systems, processes, risks, and controls.
• Execute testing of IT general controls, including access security, user administration, change management, computer operations, backup and recovery, and related governance controls.
• Support bank IT audits using applicable Federal Financial Institutions Examination Council guidance and other banking regulatory expectations.
• Perform Sarbanes-Oxley information technology control testing, including IT general controls, automated controls, information technology-dependent manual controls, and key report testing, as assigned.
• Obtain and review policies, procedures, system configurations, reports, screenshots, tickets, and other evidence; follow up with client contacts when additional support is needed.
• Prepare clear, complete, and accurate work papers that describe the procedures performed, evidence reviewed, testing results, and conclusions reached.
• Identify potential control gaps or exceptions, evaluate their significance with the engagement team, and help develop practical recommendations.
• Communicate engagement status, open requests, identified issues, and scheduling concerns to the engagement team in a timely manner.
• Participate in client meetings and interviews to understand processes, gather information, and explain testing requests.
• Assist with drafting audit findings, recommendations, internal audit reports, risk assessments, and other client deliverables.
• Build knowledge of client operations, industry practices, applicable control frameworks, and emerging technology risks.
• Collaborate effectively with team members, accept coaching, and contribute to a consistent, high-quality client experience.
• Manage assigned tasks across multiple engagements and meet established deadlines and quality expectations.
• Perform other duties as assigned.

• Bachelor's degree in accounting, information systems, computer science, cybersecurity, business, or a related field required.
• Zero to two years of relevant experience in IT audit, internal audit, external audit, risk consulting, information security, technology operations, or a related field. Internship experience may be considered for an entry-level candidate.
• Foundational understanding of technology risks, internal controls, and audit concepts. Exposure to IT general controls, Sarbanes-Oxley requirements, or bank regulatory guidance is preferred but not required for a lower-level associate.
• Professional certification, or progress toward a certification such as Certified Information Systems Auditor, Certified Internal Auditor, or Certified Public Accountant, is preferred but not required.
• Strong analytical, critical-thinking, organizational, and problem-solving skills.
• Clear written and verbal communication skills and the ability to interact professionally with clients and team members.
• Ability to learn new systems and audit approaches, manage multiple assignments, work both independently and as part of a team, and respond constructively to feedback.
• Proficiency with Microsoft Office applications, including Word and Excel.
• Access to reliable transportation for travel to assigned client locations, when required.
• Ability to work additional hours on occasion based on client and engagement needs.