Senior Information Technology Auditor

Our client, a fast-growing technology company headquartered in the Bay Area, is seeking an IT Auditor to support its SOX compliance program during a critical audit cycle. This is a hands-on role for an experienced IT auditor with deep expertise in SOX IT General Controls (ITGCs), IT Application Controls (ITACs), key report testing, and SOC1 reviews.

You'll partner closely with Internal Audit, IT, business stakeholders, and external auditors to execute testing, assess control effectiveness, support remediation efforts, and ensure audit readiness across a complex technology environment.

• Execute SOX IT audit testing across IT General Controls (ITGCs), including logical access, change management, computer operations, and system development controls.
• Perform IT Application Controls (ITAC) testing across key financial applications, including interface, input, processing, and output controls.
• Own the end-to-end key report testing process, including evidence collection, walkthroughs, validation of report logic and parameters, and documentation of testing results.
• Lead SOC1 reviews by obtaining SOC reports and bridge letters, evaluating exceptions, reviewing subservice organizations, and mapping Complementary User Entity Controls to internal business and IT controls.
• Prepare clear, audit-ready work papers and maintain documentation.
• Partner with external auditors to facilitate reliance on internal testing and support an efficient year-end audit.
• Track audit findings, monitor remediation efforts, and validate corrective actions with control owners.

What We're Looking For

• Bachelor's degree in Information Systems, Computer Science, or a related discipline.
• 4+ years of IT audit experience within a Big 4 firm, consulting organization, or public company internal audit team.
• Strong hands-on experience performing SOX ITGC and IT Application Controls testing.
• Experience executing key report testing, including validation of report logic, completeness, accuracy, and report parameters.
• Experience reviewing SOC1 reports, evaluating exceptions, assessing subservice organizations, and mapping CUECs.