We are seeking a Senior Technology and Security Auditor who can independently plan, execute, and document technology audits across complex, global environments. This role is best suited for a candidate who can identify and evaluate technology and security risks, prepare clear audit documentation, communicate practical findings, and work directly with key stakeholders, including application developers, security engineers, technology leaders, process owners, and external auditors.
- Lead the planning, execution, and documentation of General IT Controls (GITC) audits in partnership with business process owners and external auditors.
- Drive the continued development and execution of the company's IT, cybersecurity, and operational audit programs, identifying opportunities to enhance audit coverage, efficiency, and risk management.
- Partner with business leaders, IT, and security teams to identify technology and cybersecurity risks, evaluating the design and effectiveness of internal controls across the organization.
- Serve as the organization's subject matter expert for SOX General IT Controls (GITCs), providing guidance to IT and security process owners on control design, risk identification, and remediation strategies.
- Participate in pre-deployment reviews of internally developed applications and technology solutions to evaluate control design and implementation before production.
- Prepare high-quality audit documentation, including process narratives, flowcharts, risk and control matrices, control design assessments, testing workpapers, and substantive testing documentation that supports audit conclusions and withstands internal and external review.
- Prepare and present clear, well-supported audit findings and recommendations that communicate the condition, criteria, root cause, associated risk, and practical remediation actions to process owners and senior leadership.
- Partner with process owners to develop, monitor, and validate remediation plans, coordinating follow-up activities and testing to ensure timely resolution of audit findings.
- Build strong working relationships with internal stakeholders, external auditors, and business leaders to support enterprise risk assessments, internal audits, and regulatory compliance initiatives.
- Perform operational audits, process reviews, internal investigations, and other special projects as requested by management.
- Leverage data analytics, automation, and Artificial Intelligence (AI) to improve audit effectiveness, expand testing coverage, identify emerging risk trends, and enhance the quality of audit evidence.
- Support the growth of the Internal Audit function by assisting with the recruitment, onboarding, mentoring, and professional development of Internal Audit team members.
Requirements- Bachelor's degree in Accounting, Finance, Information Systems, Computer Science, Cybersecurity, or a related field
- 2-6 years of experience in public accounting, internal audit, or IT audit, with a strong focus on SOX General IT Controls (GITCs), IT risk, and information security testing
- Experience evaluating and auditing a variety of technologies, security tools, IT infrastructure, and system development methodologies, including both commercial (vendor) software and internally developed applications
- Experience preparing comprehensive audit documentation, including process narratives, flowcharts, risk and control matrices (RCMs), control design assessments, and audit testing workpapers
- Experience partnering with internal and external auditors, business stakeholders, and IT teams throughout the audit lifecycle
- Proven ability to collaborate effectively in a fast-paced, cross-functional environment
- Strong quantitative, analytical, critical thinking, and problem-solving skills, with the ability to evaluate technology risks and identify practical solutions
- Demonstrated ability to identify root causes of control deficiencies, assess risk, apply professional skepticism, and develop practical, well-supported recommendations
- Excellent written, verbal, and presentation skills, with the ability to communicate effectively with both technical and non-technical audiences
- Strong organizational, project management, and time management skills, with the ability to manage multiple priorities and work independently in a hybrid or remote work environment
- Proficiency with Microsoft Office Suite, including Word, Excel, PowerPoint, and other business productivity tools
- The ability to travel domestically and internationallyup to 20%
- Fluent in English
Preferred Requirements:Experience evaluating and testing cybersecurity controls, including:
- Identity and Access Management (IAM)
- Privileged Access Management (PAM)
- Vulnerability Management
- Security Monitoring and Incident Response
- Data Protection Controls
- Security Governance Frameworks
- Experience planning and executing SOX 404 General IT Controls (GITC) audit
- Experience assessing controls within cloud environments (Azure, AWS, or Google Cloud Platform), identity management platforms, cybersecurity programs, and DevOps environments
- Professional certifications such asCPA, CISA, CIA, ISO 27001 Lead Auditor, NIST Cybersecurity Framework (CSF), or related credentials, or a commitment to obtain certification after joining
- Experience within the financial services, fintech, or other highly regulated industries, including the design, implementation, or assessment of technology and security controls
- Experience partnering withexternal auditors to support SOX compliance, integrated audits, or other regulatory engagements
- Experience using data analytics, reporting, automation, and Artificial Intelligence (AI)tools to improve audit efficiency, testing, and reporting
- Public accounting and/or consulting experience
- Ability to communicate effectively in one or more additional languages is a plus
Benefits- 401(k) Plan
- Health/Dental/Vision Insurance
- Employee Stock Purchase Plan
- Company-paid Life Insurance
- Company-paid disability insurance
- Tuition Reimbursement
- Paid Time Off
- Paid Volunteer Days
- Paid Holidays
- Casual Office Attire
- Plus many more employee perks & incentives!
