- Company Name
- Addison Group
- Job Title
- Information Technology Auditor
- Job Description
-
**Job Title:** Information Technology Auditor (Senior ITGC Lead)
**Role Summary:**
Lead end‑to‑end IT general controls (ITGC) testing for SOX and corporate audit programs across enterprise applications (Oracle, SAP), infrastructure, change management, and industrial control systems. Drive audit planning, execution, and reporting while mentoring junior auditors and collaborating with IT, finance, and business stakeholders in a dynamic, merger‑influenced environment.
**Expectations:**
- Deliver comprehensive, compliant audit findings and high‑quality reports.
- Manage audit teams, allocate tasks, and ensure timely completion.
- Mentor and develop junior auditors’ technical and leadership skills.
- Act as the primary liaison between business units and IT on audit requirements and control policies.
- Recommend and help implement robust IT controls and process improvements.
**Key Responsibilities:**
- Plan, assign, and oversee ITGC testing activities, ensuring alignment with corporate standards and SOX requirements.
- Execute audits on user access, change management, operations, and infrastructure controls, including legacy systems in Oracle and SAP environments.
- Identify and document control gaps, prepare action plans with control owners, and track remediation.
- Produce clear, concise documentation of test results for internal leadership and external auditors.
- Communicate audit methodologies, findings, and recommendations to business and IT stakeholders.
- Lead audit projects across multiple domains: applications, industrial control systems, infrastructure, and cybersecurity.
- Mentor and train junior auditors on audit methodology, controls testing, and leadership practices.
- Identify and propose enhancements to IT controls and corporate compliance frameworks.
**Required Skills:**
- 5+ years of IT audit experience, including hands‑on testing and audit leadership.
- Deep knowledge of Oracle, SAP (including legacy systems), and IT general controls (access, change management, operations).
- Proficiency with SOX compliance, ITGC frameworks, and corporate audit standards.
- Strong analytical, documentation, and stakeholder communication skills.
- Leadership, mentoring, and team‑management capabilities.
**Required Education & Certifications:**
- Bachelor’s degree in Information Systems, Accounting, Finance, Computer Science, or related field.
- ISO/IEC 27001/ISO 22301 experience preferred.
- CASIA Level 2 or higher (preferred); equivalent auditing or technical certification (e.g., CISA, CNS, CISSP) acceptable.
- Knowledge of CFA or equivalent financial/technical background is a plus.