What You'll DoWe are seeking an experienced Internal Audit Lead - IT Systems and Controls to join our Internal Audit function, reporting directly to the Head of Internal Audit. This role will take ownership of SOX IT controls testing and assurance activities, with a strong emphasis on IT General Controls (ITGCs), IT Automated Controls, and Key Report testing. In addition, the role will contribute to broader IT and data-focused internal audit projects and advisory initiatives, driving value-added insights and strengthening the overall governance and internal controls environment. This is a leadership level role that combines hands-on testing and evaluation with leadership, oversight, and stakeholder engagement.
- SOX IT Controls & Assurance
- Lead the planning, execution, and oversight of SOX testing for IT General Controls (ITGCs), IT Automated Controls, and Key Reports
- Assist in the annual IT SOX scoping and risk assessment process in alignment with the overall ICFR and SOX program.
- Conduct and lead walkthroughs and design/effectiveness testing of IT controls across homegrown and third-party systems
- Coordinate evidence collection, manage remediation efforts, and ensure timely closure of audit gaps.
- Oversee the work of co-sourced as well as internal team members and review their work to ensure high-quality, consistent results.
- Identify control deficiencies and work with management to design effective remediation approaches and measures.
- Monitor changes to business processes and apply independent judgement to evaluate the potential impact to the control environment and recommend necessary improvements. Present the impact of the changes to the Head of Internal audit and other stakeholders prior to implementation.
- Manage and update all ICFR / SOX 404 documentation as required including COSO framework mapping, process and control narratives/flowcharts, risk and controls matrix, and testing approach.
- Apply professional skepticism and subject matter expertise to independently evaluate and conclude on control deficiencies and develop the necessary remediation actions and monitor their implementation in due time.
- IT & Data Assurance Projects
- Lead and deliver internal audit projects focused on IT, data governance, and emerging technology risks with a primary focus on internal controls for financial reporting and SOX.
- Provide advisory services to technology and business leaders on IT risk management, control optimization, and compliance matters.
- Evaluate data integrity, system development practices, access management, and change management processes.
- Work closely with engineering, and IT teams to design and implement effective and scalable IT controls.
- Control Evaluation & Remediation
- Identify, assess, and document control deficiencies, including evaluation of severity and impact.
- Work with cross functional leadership and process owners to develop, track, and validate timely remediation plans.
- Recommend process improvements and efficiency opportunities while maintaining control effectiveness.
- Stakeholder Collaboration
- Act as the key liaison with IT, Engineering, Security, finance, and business system teams for IT SOX and assurance initiatives.
- Partner with external auditors to coordinate IT SOX testing approaches and reliance strategies.
- Provide training and guidance to IT and business stakeholders on IT control requirements and best practices.
- Reporting & Communication
- Prepare reports and presentations summarizing IT SOX results, audit findings, and remediation progress for the Head of Internal Audit and Audit Committee.
- Communicate complex IT control issues in a clear, business-oriented manner to senior management and stakeholders.
- Monitor industry and regulatory developments, advising leadership on emerging IT and data-related risks.
You- Education & Certification
- Bachelor's degree in Information Systems, Computer Science, Accounting, or related field.
- CISA, CISSP, or equivalent certification strongly preferred; CPA or CIA is a plus.
- Experience
- 10+ years of progressive experience in IT audit, IT risk, or IT SOX compliance, with at least 3+ years in a managerial or supervisory level role.
- Big Four accounting firm or equivalent experience in Internal or External Audit or IT consulting practice.
- Deep expertise in ITGCs, IT Automated Controls, key report testing, and their relevance to ICFR, Internal audit methodology and IIA standards.
- Experience auditing or testing both homegrown business systems and third-party SaaS applications.
- Familiarity with data governance, system implementation reviews, and cybersecurity risk assessments
- Experience of working with audit management tools (e.g., AuditBoard, Archer, Workiva) to manage SOX and IT compliance programs..
- Skills & Competencies
- Strong analytical and technical skills with the ability to evaluate IT and data risks across complex environments.
- Excellent communication and interpersonal skills to effectively engage with both technical and non-technical stakeholders.
- Proven ability to lead and review the work of internal teams and co-sourced resources.
- Organized, detail-oriented, and able to manage multiple priorities in a dynamic environment.
Nice to Have- Experience with data analytics and automated testing tools to enhance SOX testing efficiency and insights.
- Exposure to emerging technologies such as cloud computing, cybersecurity, and RPA, and their control implications.
- Prior experience working in a fast-growth or global organization, adapting SOX programs to evolving structures and complexity.
- Familiarity with cybersecurity frameworks (e.g., NIST, ISO 27001, COBIT) and their application to IT risk management.
- Experience with data governance and data integrity reviews, including testing controls over data migration, transformation, and reporting.
- Prior involvement in system implementation or upgrade reviews for ERP, financial systems, or homegrown applications.
- Exposure to DevOps, agile development, or CI/CD environments, including related ITGC and change management considerations.
- Working knowledge of data analytics and automation tools (e.g., SQL, Python, ACL, Power BI) to enhance testing efficiency and assurance insights.
Salary Range InformationThe annual salary range for this position has been set based on market data and other factors. However, a salary higher or lower than this range may be appropriate for a candidate whose qualifications differ meaningfully from those listed in the job description.
