IT Audit Senior

Position Summary

The Senior IT Auditor conducts IT operational audits (e.g., Cloud Security, Vulnerability Assessment, SDLC, BCP/DR) and SOX ITGC compliance audits across the UGI enterprise. This role requires strong project management skills, proactive verbal and written communication, and a willingness to leverage emerging technologies including AI-powered tools to enhance audit quality and efficiency.

IT Operational Audits (40%)

• Develop risk and control matrices, audit approaches, and test procedures. Manage project timelines, coordinate with stakeholders, and proactively communicate status and deadlines to audit management.
• Execute test procedures and create concise, precise work papers. Verify accuracy of all work product—including control owner assignments and data references—before submitting for review.
• Validate exceptions with auditees, collaborate on root cause analysis and remediation. Align with audit management on approach and messaging before drafting deliverables. Initiate discussions when timelines are at risk.
• Provide guidance to team members and lead project elements as needed.

SOX ITGC Compliance (40%)

• Schedule and lead walkthroughs with control owners to understand IT processes and the control environment. Execute ITGC test procedures and document conclusions in work papers.
• Communicate and validate deficiencies with auditees, external auditors, and the audit team. Align with management before changing stakeholder commitments or deadlines.
• Maintain ongoing awareness of ITGC status throughout the SOX cycle by communicating regularly with KPMG, control owners, and the Internal Controls & Compliance Team. Follow up on remediation actions.
• Identify opportunities to enhance audit processes through automation and AI tools (e.g., Claude, data analytics platforms). Champion continuous improvement.

Other & Administrative (15%)

• Ad hoc projects, audit tool administration, time reporting, one-on-ones, and CPE requirements.
• Communicate verbally with confidence—raise issues, ask questions, and engage in discussion rather than relying solely on email.
• Acknowledge assignments promptly, provide timelines, and keep management informed through regular verbal check-ins and written updates without requiring follow-up.
• Prepare stakeholder-ready deliverables tailored to the audience.
• Receive feedback constructively and apply it consistently to future work, demonstrating measurable improvement.

Required:

• 3+ years IT audit experience (operational audits and SOX)
• 2+ years SOX ITGC experience
• Knowledge of IT processes: network, cloud security, OS, applications, databases, information security
• Knowledge of AICPA/IIA standards, COSO, and COBIT frameworks
• Working knowledge of common OS (Windows, UNIX/Linux), databases (SQL, Oracle), and ERP systems (SAP, JDE, Sage 100)
• Strong verbal and written communication skills—able to lead discussions, present findings, and engage stakeholders at all levels
• Strong project management skills—plan timelines, coordinate stakeholders, track deliverables, escalate proactively
• Attention to detail with disciplined self-review of work product
• Ability to internalize feedback and carry lessons into future work

Preferred:

• IT operational audit experience (Cloud Security, Vulnerability Assessment, SDLC, BCP/DR)
• CISA, CIA, or CISSP certification
• Energy/Utilities industry experience
• Familiarity with Audit Board and data analytics tools
• Experience with AI-powered audit and productivity tools
• French and/or German language skills

All offers of employment are contingent upon the successful completion of a background check and drug screen, subject to applicable laws and regulations.

UGI Corporation is an Equal Opportunity Employer. The Company does not discriminate on the basis of race, color, sex, national origin, disability, age, gender identity, sexual orientation, veteran status, or any other legally protected class in its practices.

Nearest Major Market: Philadelphia

Job Segment: Project Manager, Audit, Database, ERP, Oracle, Technology, Finance