Senior Auditor, IT Controls

Responsibilities for this position include, but are not limited to, the following

• Support the risk assessment & annual SOX scoping process, by evaluating in-scope systems, applications, tools and interfaces, and assist in maintaining the Risk & Control Matrix (RCM) to reflect changes in the IT control environment
• Execute testing of IT General Controls (ITGCs) across access management, change management, IT operations, and program development, including walkthroughs, tests of design, and tests of operating effectiveness
• Execute testing of IT Application Controls (ITACs), key reports, and interfaces, including validation of the completeness and accuracy of Information Produced by the Entity (IPE)
• Perform SOC 1 / SOC 2 report evaluations, including assessment of report scope and coverage, exceptions, bridge letters, and mapping of Complementary User Entity Controls (CUECs) to RealPage controls
• Prepare clear, complete, and re-performable workpapers that meet SOX documentation expectations and stand up to internal quality review
• Develop and maintain process narratives, control documentation, and summary drafts based on a clear understanding of the end-to-end process for each in-scope control following each Walkthrough (WT)
• Coordinate evidence (PBC) requests with control owners, track open items, and follow up proactively to keep testing on schedule
• Identify potential control deficiencies, gather relevant facts, support root cause analysis, and validate remediation through retesting
• Communicate testing status, issues, and blockers timely and clearly to the Supervising Senior and Internal Controls Management
• Leverage AI tools to improve the efficiency and quality of control testing, documentation, and evidence evaluation, with appropriate validation and human review of AI-generated output
• Support continuous improvement of the IT Internal Controls program, including standardization of test procedures and expanded use of automation, analytics, and AI-enabled solutions
• Bachelor’s degree in Accounting, Computer Science, Information Systems, Management Information Systems, Finance, or a related field
• 4–6+ years of progressive experience in IT audit and IT SOX compliance; Big 4 public accounting or comparable professional services experience strongly preferred
• Hands-on experience testing ITGCs, ITACs, and IPE / key reports in support of US SOX 404 engagements
• Experience auditing cloud / SaaS platforms and CI/CD-enabled software development environments preferred (Azure DevOps & GitHub Enterprise) along with prior exposure to core ERP systems - Oracle experience strongly preferred.

Required Knowledge / Skills / Abilities

• Strong working knowledge of SOX 404, the COSO framework, and IT risk and control concepts
• Ability to execute assigned testing independently, manage multiple concurrent assignments, and consistently meet deadlines with minimal supervision
• Strong analytical and problem-solving skills, including the ability to assess system-generated evidence and query-based reports
• Strong written and verbal English communication skills, with the ability to work effectively with US-based stakeholders across time zones
• Demonstrated hands-on use of AI tools in IT audit or control evaluation work (e.g., drafting test procedures, analyzing evidence, summarizing SOC reports), applying professional skepticism and appropriate validation to AI-generated output

Preferred Certifications