IT Auditor

Select how often (in days) to receive an alert:
Create Alert

Location: San Jose, California, United States

Supermicro® is a Top Tier provider of advanced server, storage, and networking solutions for Data Center, Cloud Computing, Enterprise IT, Hadoop/ Big Data, Hyperscale, HPC and IoT/Embedded customers worldwide. We are the #5 fastest growing company among the Silicon Valley Top 50 technology firms. Our unprecedented global expansion has provided us with the opportunity to offer a large number of new positions to the technology community.

We seek talented, passionate, and committed engineers, technologists, and business leaders to join us.

Supermicro is seeking a skilled IT Auditor to plan and execute IT and technology-risk audits as an individual contributor within Internal Audit. In this role, you will focus on IT control testing, data analytics, security compliance, AI governance, third-party risk management (TPRM), and other IT operational audits. You will obtain background on the environment under review, perform risk and control assessments, define scope and objectives, evaluate the design and effectiveness of IT controls, and document findings to professional standards.

You will assess alignment with requirements such as SOX, ISO 27001, and NIST, evaluate security posture, apply data analytics to testing, and review AI governance and third-party risk. You will present concise reports to management, track remediation, and stay current on emerging technologies and security threats.

The responsibilities will include, but not limited to:

• Develop and execute IT audit work based on identified risks and regulatory requirements, including obtaining background information on the function or system being audited, performing a risk and control assessment, defining audit scope and objectives, and engaging stakeholders.
• Evaluate the design and effectiveness of IT controls, including IT general controls and application controls, to mitigate risks and support operational efficiency.
• Perform audit tests including walkthroughs, interviews, data analysis, and other procedures as applicable.
• Apply data analytics to scoping, population completeness, exception testing, and repeatable audit procedures.
• Document audit work papers, findings, and recommendations in accordance with professional standards.
• Ensure IT systems and processes comply with relevant regulations, standards (e.g., SOX, ISO, NIST), and internal policies.
• Evaluate the security posture of IT systems, including identity and access management, data security, network security, cybersecurity, and vulnerability management.
• Assess AI governance practices, including inventory awareness, acceptable use controls, data handling for AI tools, human oversight, and alignment with internal and regulatory expectations.
• Perform TPRM-related audit work, including vendor control assessments, review of independent assurance reports, and evaluation of ongoing monitoring
• Conduct risk assessments related to emerging technologies, including cloud computing, big data, AI, and other relevant platforms.
• Identify opportunities for improvement in IT processes and controls and provide recommendations to management in a scheduled manner.
• Prepare and present clear and concise audit reports to management, highlighting key findings, risks, and recommendations.
• Effectively communicate and collaborate with IT professionals, business leaders, Security, Procurement, and external auditors.
• Track and follow up on the implementation of audit recommendations to ensure timely remediation of identified issues.
• Coordinate and deliver assigned reviews in a timely, efficient, and cost-effective manner without compromising…