Job Description

"Candidates must be authorized to work in the United States without the need for current or future visa sponsorship."

General Summary:

The Senior , IT Internal Audit is responsible for executing audits focused on information technology processes, systems, and controls across the organization. This role ensures that IT controls are effectively designed and operating to mitigate risks and support the reliability, integrity, and security of the company’s systems and data. The ideal candidate will have deep knowledge of Sarbanes-Oxley (SOX) requirements including General IT Controls (GITCs), IT Application Controls, and the Systems Development Lifecycle (SDLC), along with proven experience in planning, executing, and reporting internal audit projects.

Principal Duties & Responsibilities:

Audit Planning & Execution

• Co-develop and execute risk-based IT audit plans aligned with organizational objectives and regulatory requirements.
• Perform audits of IT general controls, application controls, and system implementation projects.
• Evaluate IT systems and processes for efficiency, effectiveness, and compliance with applicable standards and policies.
• Assess control design and operating effectiveness for key systems and applications.
• Coordinate with business and technology teams to ensure audit findings are understood and remediations are tracked to completion.

IT Risk & Control Evaluation

• Execute testing of General IT Controls (GITCs), including access management, change management, IT operations, and system security.
• Execute testing of IT Application Controls (ITACs) within key business systems (e.g., ERP, financial systems).
• Assess the Systems Development Lifecycle (SDLC) to ensure appropriate project governance, testing, change control, and deployment processes are followed.
• Identify opportunities to improve IT processes and strengthen the internal control environment.

Audit Reporting & Communication

• Prepare clear, concise, and insightful audit reports summarizing findings, risks, and recommendations.
• Present audit results and recommendations to relevant stakeholders.
• Support continuous improvement of the audit methodology, templates, and reporting standards.

Leadership & Collaboration

• Partner with business functions such as enterprise risk management, cybersecurity, and compliance teams to support integrated risk and control assessments.
• Stay current with emerging IT risks, technologies, and audit practices.
• Other duties as assigned

Position Requirements:

• Office work environment, 40+ work hours per week
• Most work will be performed at the Store Support Center (Corporate Office), but some work requires travel to a store or distribution center (various locations).
• Up to 15% overnight travel required.

Minimum Requirements/Qualifications:

• Bachelor’s degree in information systems, computer science, accounting or related field required.
• 3+ years of experience in IT audit, information security, or related field.
• Experience in public accounting or large corporate internal audit environment preferred.
• Applicable professional certification highly desirable (CISA, CISSP, CIA, CPA, etc.)
• Strong knowledge and application of Internal Audit and IT audit standards and practices (e.g., IIA, ISACA) and industry-accepted IT Governance standards (e.g., COBIT).
• Familiarity with frameworks such as ISO 27001 and NIST.
• Experience working with or auditing IT applications, databases, platforms, and networks. Including IT General and Application Controls and system development lifecycle controls.
• Working knowledge of ERP applications, databases, operating systems, and network systems. Working technical knowledge of contemporary network and PC operating systems, hardware, protocols, and standards.
• Experience with data analytics (e.g., Power BI, Tableau, Alteryx) or other data-driven analytical tools and procedures.
• Experience with audit management tools (e.g., AuditBoard, TeamMate, etc.).
• Key competencies include IT auditing, analytical and problem solving, ability to interpret data, building strategic working relationships, communication, customer focus, organizational awareness, project management, risk awareness, integrity.
• Ability to present ideas in business-friendly and user-friendly language.

Job Tags

Similar Jobs