IT Internal Auditor

Summary

The Internal Audit Advisor is responsible for leading and executing technology risk, internal audit, and SOX initiatives, with a focus on IT General Controls (ITGCs), IT Application/Automated Controls (ITACs), and technology controls supporting financial reporting.This role is strictly involved in internal audit and does not involve direct access to Protected Health Information (PHI), Personally Identifiable Information (PII), or any secured or confidential client data. The work is limited to internal audit and does not include handling or processing of sensitive health or personal information.

Your role in our mission

• Perform end-to-end SOX testing, including walkthroughs, risk assessment, Test of Design (TOD), Test of Operating Effectiveness (TOE), evaluation of evidence, documentation of testing results, and assessment of control deficiencies.
• Evaluate and test ITGCs covering user access management, privileged access, user access reviews, segregation of duties, change management, computer operations, and security configurations, SDLC.
• Evaluate and test ITACs/automated controls, configurable controls, system-generated reports/IPE, interfaces, and other technology-dependent controls supporting ICFR.
• Perform IT risk assessments across financially relevant applications and supporting technology environments, including applications, databases, operating systems, cloud solutions, and relevant integrations.
• Support SOX readiness by developing and enhancing IT risk and control matrices, control descriptions, testing procedures, documentation, and evidence standards.
• Identify deficiencies in control design or operation, perform root-cause and risk assessments, and partner with control owners to develop and implement appropriate remediation or compensating controls.
• Perform control benchmarking and rationalization to identify control gaps, redundant controls, and opportunities to strengthen or streamline the IT control environment.
• Partner with IT, Information Security, Finance, Accounting, application owners, and business process owners on control design, testing, remediation, and implementation of new or enhanced controls.
• Coordinate with internal and external auditors on ITGC/ITAC testing, audit evidence, identified deficiencies, remediation, and SOX-related deliverables.
• Independently manage multiple audit and controls assignments from planning and scoping through testing, reporting, remediation, and closure.

What we're looking for

Qualifications

• Bachelor’s degree in Accounting, Finance, Management Information Systems, Computer Science, Information Technology, or a related field, or equivalent relevant education and work experience.
• Professional certification such as CISA, CIA, CPA, CA, CISSP, or equivalent is preferred.

Required Skills

• 8+ years of relevant experience in IT Audit, Internal Audit, External Audit, Technology Risk, Risk Advisory, SOX Advisory, or a related assurance function. Prior experience at a Big 4 public accounting firm.Significant hands-on experience with SOX compliance, SOX readiness, ITGCs, ITACs, and technology controls supporting internal control over financial reporting (ICFR).
• Strong understanding of the COSO Internal Control Framework and its practical application to technology risks, business processes, and financial reporting. Strong experience performing technology risk assessments and evaluating controls across applications and supporting IT environments.
• Hands-on experience evaluating the design and operating effectiveness of ITGCs (Change Management, Access, Security, Computer Operations, SDLC) Test of design(TOD) and test of operating effectiveness (TOE)Authentication and security configurations
• Experience evaluating IT Automated/Application Controls (ITACs), including automated and configurable controls within ERP environments such as SAP ECC and SAP S/4HANA (3 way match, duplicate invoices, copy controls etc). Experience evaluating system-generated reports, information used in control execution (IPE), interfaces, automated data transfers, and other technology-dependent controls relevant to financial reporting.
• Experience evaluating technology risks and controls associated with applications and supporting IT platforms, including operating systems and databases, as applicable to the SOX environment. Experience developing and reviewing IT process narratives, flowcharts, risk and control matrices, control descriptions, walkthrough documentation, test procedures, workpapers, and supporting evidence.
• Strong understanding of the relationship between ITGCs, ITACs, business process controls, financial reporting risks, and financial statement assertions, including the impact IT control deficiencies may have on reliance on automated controls and system-generated information.

What you should expect in this role

• Remote opportunity
• 1 PM to 11 PM IST work timing