Internal Auditor, Compliance, Risk Management

This is a fully remote position, open to applicants in North Carolina.

📋 Description

• Assist in access governance, ensure audit readiness, maintain compliance, mitigate risks, and carry out control activities across business applications and technology platforms.

• Manage role-based access, including provisioning, deprovisioning, role adjustments, account upkeep, and password resets.

• Gather, validate, and prepare audit evidence for compliance assessments and control testing.

• Execute SQL queries and scripts to obtain, analyze, and validate data related to audits and compliance.

• Utilize Excel for data analysis, reconciliations, reporting, and providing audit support.

• Document processes, controls, evidence inventories, audit workpapers, access requests, approvals, account modifications, and remediation efforts.

• Oversee adherence to internal policies, standards, and regulatory requirements.

• Evaluate access requests for approval, documentation, least privilege adherence, and alignment with role-based access.

• Manage access administration requests using ServiceNow.

• Organize and prioritize access governance tasks, audit deliverables, account maintenance, and compliance responsibilities.

• Report access exceptions, system limitations, control concerns, cyber risks, and control deficiencies.

• Provide support for Azure-based environments through reporting, access evaluations, compliance checks, and user management.

• Investigate access discrepancies, entitlement issues, and control exceptions.

• Assist in user access reviews, role validations, temporary access assessments, and related control activities.

• Collaborate with IT, business stakeholders, application owners, security teams, auditors, and end users across various regions.

⛳️ Requirements

• A bachelor's degree in Information Systems, Information Technology, Computer Science, Business, Accounting, Cybersecurity, or a related field.

• A minimum of 2 years of experience in access management, audit, compliance, governance, risk, internal controls, cyber or technology operations.

• Proficient in using Microsoft Excel for data analysis, reporting, and reconciliation tasks.

• Experience in executing and interpreting SQL queries and scripts.

• Familiarity with ServiceNow or similar ticketing and workflow management systems.

• Knowledge of Microsoft Azure environments and cloud technologies.

• Solid understanding of access management concepts, including provisioning, deprovisioning, account maintenance, and role-based access.

• Capability to manage multiple competing priorities and meet deadlines effectively.

• Exceptional attention to detail and a commitment to accuracy.

• Strong written and verbal communication skills.

• Quick learner of new systems, applications, and business processes.

• Ability to work both independently and collaboratively in a fast-paced, dynamic environment.

• Preferred: experience supporting SOX, FedRAMP, SOC, ISO, NIST, or other regulatory and compliance frameworks.

• Preferred: possession or pursuit of CRISC, CISA, CIA, CPA, or equivalent certification.

• Preferred: knowledge of IT General Controls, access management controls, segregation of duties, and audit evidence requirements.

• Preferred: experience with access reviews, user provisioning, deprovisioning, RBAC, and least-privilege access models.

• Preferred: familiarity with Azure Active Directory, identity governance, or cloud security controls.

• Preferred: experience supporting internal or external audits.

• Preferred: exposure to automation, scripting, reporting tools, or process improvement initiatives.

• Preferred: experience across multiple enterprise applications and business platforms.

🏝️ Benefits

• Eligibility for an annual incentive program.

• A purpose-driven global organization.

• High visibility and global exposure.

• Collaboration with seasoned professionals in IT, Finance, and Audit.

• Experience with complex systems, large-scale SOX programs, and global audits.

• Opportunities for continuous learning, career advancement, and professional development.

• Comprehensive benefits offered (details linked in the posting).