IT Auditor and Data Analyst

Essential Duties and Responsibilities

• Execute risk-based IT audit engagements under the approved Internal Audit Plan.
• Assess IT General Controls, logical access, privileged access, change management, SDLC, and IT operations.
• Conduct walkthroughs, control design assessments, operating effectiveness testing, and audit documentation.
• Assess compliance with ISACA guidelines, ISO 27001, and applicable regulatory requirements.
• Evaluate ERP application controls in Oracle, SAP, Banner, or equivalent environments.
• Prepare draft audit findings, reports, and management action plans for Director of Internal Audit review.
• Design and execute analytics across financial and non-financial datasets.
• Apply exception reporting, anomaly detection, segregation of duties analysis, and fraud risk indicators.
• Develop dashboards, automated scripts, and visualizations using advanced Excel, Power BI, SQL, or equivalent tools.
• Support continuous auditing, special reviews, investigations, and data-driven assignments.
• Contribute to audit programs, working papers, methodology documentation, and IT risk and audit universes.
• Coordinate with auditees, follow up on requests, and monitor emerging technology risks and cybersecurity developments.

Qualifications, Certifications, and Experience

• Bachelor's degree in Information Technology, Computer Science, Finance, or a related field.
• A Master's degree is preferred.
• CISA certification is required.
• ISO 27001 Internal Auditor or Lead Auditor certification is preferred.
• At least 8 years of progressive IT audit, risk, and compliance experience, including at least 3 years of hands-on data analytics experience in an audit or risk context.
• Experience with IT General Controls audits, application controls reviews, and ERP audit assignments.
• Experience in a structured internal audit function using risk-based methodologies and professional auditing standards.

Knowledge and Skills

• Strong knowledge of IT General Controls, ERP environments, and IT governance frameworks.
• Proficiency in advanced Excel and Power BI, with working knowledge of SQL or equivalent querying tools.
• Solid understanding of ISACA frameworks, ISO 27001, and risk-based internal audit methodology.
• Strong documentation, report writing, analytical thinking, and professional skepticism skills.
• Effective communication and interpersonal skills for engaging auditees at all organizational levels.

Preferred Knowledge and Experience

• Exposure to fraud risk assessment methodologies and forensic data analysis techniques.
• Experience with Python or R for data extraction and analysis.
• Knowledge of continuous auditing and monitoring tools and practices.

Working Conditions

• Work is normally performed in a typical interior or office work environment.
• No or very limited physical effort is required.
• No or very limited exposure to physical risk.

Reporting Structure