Job Title: Senior IT Auditor
Location: Remote
Overview
We are seeking an experienced Senior IT Auditor to independently plan and execute risk-based technology audits, assess unfamiliar systems and processes, and deliver clear, well-supported findings. The role requires audit experience beyond routine SOX compliance testing, strong judgment, and the ability to contribute with limited technical guidance. You must be available during Central Time business hours.
Initial work is expected to include a post-implementation review of a financial reconciliation application, building on existing planning and carrying the audit through completion. You will need to learn how the system is used, understand its data flows and connections, and identify relevant controls and gaps.
Key Responsibilities
Independently plan, scope, and execute risk-based IT audit procedures, including walkthroughs, control evaluations, and testing.
Assess IT risks and controls, including logical and privileged access, change management, and other technology-related controls.
Evaluate unfamiliar environments and develop appropriate audit procedures when established programs are unavailable or insufficient.
Interview auditees, understand processes, identify existing controls, and recognize control deficiencies and emerging risks.
Develop and maintain risk/control matrices, audit programs, testing documentation, and workpapers that clearly explain the work performed, evidence examined, and conclusions reached.
Use Excel and relevant data-analysis tools to support audit testing and conclusions.
Develop practical findings and recommendations, explain their business significance, and communicate results clearly.
Work independently in a remote setting while maintaining regular checkpoints and meeting delivery and quality expectations.
Relevant frameworks and standards may include COBIT, COSO, NIST CSF, and/or applicable ISO standards, depending on the engagement. Experience with every listed framework is not required.
Required Qualifications
Five or more years of progressive, hands-on IT audit experience, including risk-based or operational auditing beyond routine SOX compliance testing.
Experience independently owning audit work from planning and risk assessment through testing, documentation, and reporting.
Strong knowledge of IT risks, internal controls, ITGCs, and audit methodologies.
Ability to learn unfamiliar systems and processes quickly and develop appropriate audit approaches.
Experience preparing risk/control matrices, audit programs, testing documentation, and understandable, defensible workpapers.
Excel proficiency and experience using data analysis to support audit activities.
Strong analytical, investigative, critical-thinking, problem-solving, and written and verbal communication skills.
Preferred Qualifications
CISA certification; CISSP, CIA, CPA, or comparable certifications are also beneficial.
Power Query proficiency or exposure to Optro.
Big Four or similar audit-firm experience.
Experience auditing cybersecurity, IT operations, infrastructure, applications, or emerging technologies.
Experience conducting advisory, operational, or other non-SOX IT audit engagements.
How to Apply
Submit your resume for confidential consideration. Be prepared to discuss specific audits you personally planned and executed, including how you identified risks, designed testing, evaluated evidence, documented conclusions, and developed recommendations. Use examples that do not disclose confidential information.