Sr. Information Systems Auditor

Position Overview

We are looking for a Senior IT Auditor with expertise in IT General Controls (ITGC), cybersecurity, and cloud computing to join our internal audit team. This role involves conducting IT risk assessments, evaluating controls, and providing strategic recommendations to improve security and operational efficiency. The ideal candidate must have strong audit experience, excellent communication skills, and the ability to lead audit engagements.

Key Responsibilities

• IT & Business Process Understanding: Assess IT risks, control points, and compliance requirements while identifying process inefficiencies.
• Risk Assessment & Audit Planning: Develop and execute IT risk assessments, define audit scope, and mentor junior auditors.
• ITGC & Security Testing: Evaluate access management, change management, cybersecurity, and cloud security controls.
• Cloud Security & IT Controls Evaluation: Assess IT security controls, including cloud platforms (AWS, Azure), IAM, and PAM, while applying industry frameworks (COBIT, NIST, ISO 27001).
• Audit Execution & Reporting: Develop audit programs, conduct control testing, and write clear and actionable audit reports.
• Stakeholder Engagement: Lead discussions, present audit findings, and ensure management understands risks and remediation steps.
• Advisory & Continuous Improvement: Recommend risk mitigation strategies, monitor emerging IT security risks, and enhance audit methodologies.

Preferred Skills

• Technical & Audit Expertise:
  • Experience in IT risk assessments, control evaluations, and identifying security vulnerabilities.
  • Ability to lead and mentor junior auditors while reviewing and enhancing audit work.
• Communication & Leadership:
  • Strong verbal/written communication, stakeholder engagement, and report writing skills.
  • Ability to conduct interviews and present findings effectively.
• Certifications (Preferred):
  • CISA, CISSP, CRISC, CIA.

Qualifications

• Requires an undergraduate degree from an accredited college or university (where applicable). 
• Typically has 5-7 years significant experience.