IT Audit Associate – Digital Risk Services

This is a fully remote position, open to applicants in North Carolina, +2 more states.

📋 Description

• Assist in executing IT audits, technology risk assessments, and assurance projects

• Aid in IT General Controls, internal IT audits, SOX 404 compliance support, SOC 1 and SOC 2 engagements, and technology risk evaluations

• Comprehend clients' business operations, technology frameworks, systems, infrastructures, risks, and controls

• Engage in process and control walkthroughs with client stakeholders

• Recognize technology risks and the controls implemented to mitigate them

• Assess the design, implementation, and operational effectiveness of technology controls

• Conduct testing of ITGCs across enterprise applications, infrastructure, and cloud environments

• Perform tests on automated controls, application controls, key reports, interfaces, and other IT-dependent controls

• Review SOC 1 and SOC 2 reports, assessing control objectives, complementary user entity controls, exceptions, and impacts

• Support technology advisory and risk projects related to system implementations and technology or process changes

• Analyze audit evidence to identify control weaknesses, technology risks, and potential process enhancements

• Formulate recommendations to bolster controls, mitigate risks, and refine processes

• Prepare precise audit workpapers, documenting walkthroughs, procedures, evidence, findings, and conclusions

• Gather, organize, and evaluate client documentation and audit evidence

• Apply professional skepticism and sound judgment in evaluations

• Identify and communicate exceptions, unusual circumstances, and potential challenges

• Develop a working knowledge of AICPA, PCAOB, and other relevant standards

• Integrate review comments and feedback into workpapers

• Fulfill assigned engagement responsibilities in alignment with schedules, budgets, milestones, and quality standards

• Cultivate professional relationships with clients and engagement team members

• Maintain communication with clients regarding documentation requests, scheduling walkthroughs, conducting tests, and follow-ups

• Provide updates on responsibilities, potential challenges, and engagement status to senior team members and leaders

• Collaborate with team members and contribute to a supportive team environment

• Actively seek and apply coaching and feedback

• Engage in professional development, technical training, and learning opportunities

⛳️ Requirements

• Bachelor’s degree in Accounting, Accounting Information Systems, Information Systems, Information Technology, Computer Science, Finance, or a related field

• 0 to 2 years of relevant professional experience in IT audit, technology risk, IT assurance, internal audit, public accounting, management consulting, cybersecurity, information technology, or a related field

• Foundational knowledge of information technology, internal controls, information systems, or audit and risk concepts through professional experience, internships, or relevant academic coursework

• Strong analytical, problem-solving, organizational, written communication, and interpersonal skills

• Capability to manage assigned tasks, meet deadlines, and function effectively within a team

• Preferred experience through internships or professional roles in public accounting, professional services, internal audit, technology risk, cybersecurity, or management consulting

• Familiarity with ITGCs, including logical access, change management, and IT operations is preferred

• Understanding of SOX 404 compliance and technology controls that support financial reporting is preferred

• Familiarity with automated controls, application controls, key reports, interfaces, or other IT-dependent controls is preferred

• Acquaintance with enterprise applications, technology infrastructure, or cloud environments is preferred

• Exposure to SOC 1 and SOC 2 reports or third-party risk assessments is preferred

• Familiarity with AICPA or PCAOB auditing standards or other applicable professional standards is preferred

• While professional certifications are not required for entry, relevant certifications are encouraged

• Ability to quickly learn new technologies, systems, methodologies, and concepts

• Clear and professional written and verbal communication skills

• Ability to ask insightful questions and appropriately escalate issues

• Strong organizational and time-management skills

• Capacity to work independently and collaboratively within an engagement team

• Openness to coaching and constructive feedback

• Professionalism and sound judgment in interactions with clients and colleagues

• Commitment to ongoing learning as technologies, risks, regulations, and professional standards evolve

🏝️ Benefits

• Generous time off and paid firm holidays, including the week between Christmas and New Year’s

• Flexible work arrangements

• 16 weeks of paid maternity and adoption leave

• 8 weeks of paid parental leave

• 4 weeks of paid caregiver leave (once eligible)

• Comprehensive health and wellness benefits, including wellness coaching and mental health counseling

• One-on-one professional coaching

• Leadership and career development programs

• Access to Beyond: a unique program offering experiences that enhance both personal and professional growth