Position Overview:
We are seeking an experienced Senior IT Auditor to lead technology-focused audits and strengthen the organization’s IT control environment. In this role, you’ll evaluate the reliability, security, and effectiveness of internal systems and processes. Your work will center around risk identification, system assessments, and delivering practical, compliance-driven recommendations. This is a hands-on role that also includes mentorship responsibilities and strategic collaboration across departments.
Core Responsibilities:
-
Lead and manage audits related to core IT domains, including system access, application logic, and user activity.
-
Analyze technology environments to uncover operational gaps, weaknesses in control design, or compliance risks.
-
Execute evaluations of both system-wide controls and application-specific processes.
-
Coordinate with internal teams and third-party partners to ensure effective and efficient audit execution.
-
Perform access control reviews, assess data handling practices, and verify system configurations against regulatory benchmarks.
-
Develop clear, actionable insights and communicate findings with stakeholders at all levels.
-
Drive continuous improvement by recommending and tracking remediation actions.
-
Maintain audit records and documentation aligned with industry standards and audit frameworks.
-
Serve as a technical mentor to junior audit staff, fostering growth and ensuring audit integrity.
-
Take part in special projects or emerging audit initiatives as needed.
Qualifications & Experience:
-
Bachelor’s degree in Information Systems, IT Management, Finance, or a related discipline.
-
Minimum of 5 years of professional IT experience, with 4+ years in an audit or risk-focused capacity.
-
Industry certification such as CISA (Certified Information Systems Auditor) is required.
-
In-depth understanding of IT risk principles, regulatory compliance (e.g., SOX, GDPR), and control frameworks (e.g., NIST, COBIT).
-
Strong ability to assess technical environments and articulate risk in clear, business-focused terms.
-
Excellent organizational, analytical, and communication skills.