Lead and execute information systems audits by assessing technology risks and controls, testing control design and effectiveness, and evaluating compliance with SOX, regulatory requirements, and organizational policies. Document work papers, communicate findings and recommendations to stakeholders, and support enterprise risk assessments and audit program improvements.
Responsibilities
- Identify business process and IT risks, assess severity and impact, and develop audit tests.
- Assess technology controls for SOX, regulatory, and organizational policy compliance.
- Test control design and operating effectiveness across technology processes.
- Document audit procedures, evidence, results, and work papers.
- Present audit findings, risks, and recommendations to IT management and stakeholders.
- Support enterprise risk assessments and update audit programs, questionnaires, and procedures.
Required Skills
- IT auditing
- Risk assessment
- SOX compliance
- IT General Controls (ITGCs)
- Control design testing
- Operating effectiveness testing
- COBITNISTAudit workpaper documentation
- Microsoft Excel
