Senior Internal Auditor

This is a fully remote position, open to applicants in United States, +1 more state.

📋 Description

• Conduct technology audits that encompass SOX compliance, cloud infrastructure within Amazon Web Services and Google Cloud Platform, application controls, cybersecurity, artificial intelligence and machine learning systems, as well as DevSecOps practices.

• Design and evaluate IT general controls, application controls, and entity-level controls with minimal guidance.

• Assist with the IT SOX program from the planning stage to reporting, which includes risk-based audit planning, process walkthroughs, testing, and collaboration with external co-source partners.

• Ensure clear, high-quality audit documentation is maintained, including risk and control matrices, process flows, test procedures, findings, and assessments of business impact.

• Lead remediation efforts by collaborating with process owners on actionable corrective plans, validating effectiveness before closure, and preparing status updates for leadership.

• Work alongside Engineering, IT Operations, Security, and business process owners to identify emerging risks and assess new system implementations for control adequacy and SOX relevance.

• Evaluate controls within financial statement cycles such as record to report, order to cash, hire to retire, and procure to pay, in addition to third-party System and Organization Controls 1 and 2 reports.

• Leverage data analytics, automation, and generative artificial intelligence tools to enhance audit efficiency, coverage, and quality.

⛳️ Requirements

• Proven experience in executing technology audits and managing risk within complex technology settings, including audit planning, testing, reporting, and remediation.

• Background in supporting IT SOX programs and in the design and testing of IT general controls and application controls.

• Familiarity with IT control frameworks such as COBIT, the National Institute of Standards and Technology framework, Information Technology Infrastructure Library, ISO 27001, and the Committee of Sponsoring Organizations of the Treadway Commission Internal Control Framework.

• Understanding of cloud security principles and cybersecurity essentials, including network security, encryption, identity and access management, vulnerability management, and Zero Trust principles.

• Experience with contemporary development practices, including Agile and DevOps, as well as data analytics and audit automation tools.

• Strong written and verbal communication skills, capable of articulating technical findings, business impacts, and practical recommendations to both technical and business audiences.

• A self-motivated, collaborative approach to managing multiple priorities, adapting to changes, and assisting teams in enhancing their risk and control frameworks.

• A bachelor’s degree in Accounting, Information Technology, Computer Science, Finance, or a related discipline, along with an active relevant professional certification such as Certified Public Accountant, Certified Internal Auditor, Certified Information Systems Auditor, Certified Information Systems Security Professional, Certified Information Security Manager, Certified in Risk and Information Systems Control, or an equivalent certification.

🏝️ Benefits

• Comprehensive benefits to support your health, finances, and overall well-being.

• Flexible Paid Time Off.

• Team Member Resource Groups.

• Equity Compensation & Employee Stock Purchase Plan.

• Growth and Development Fund.

• Parental leave.

• Home office support.