IT Senior Auditor

Location: Alpharetta, GA 30005 – Windward Campus (Hybrid Schedule)
Weekly Hours: 40 Hours
Travel: 10–15%, including some international travel

IMMEDIATE Senior IT Auditor!

We are currently representing our client in the FinTech industry, seeking an experienced Senior IT Auditor to join their growing Audit Services team on a direct hire basis.

This Senior IT Auditor will be responsible for executing and supporting audits across SOC 1, SOC 2, and SOX IT environments, including testing IT general controls across mainframe, cloud, and distributed systems. This individual will lead key components of the audit lifecycle, including planning, risk assessment, control identification, testing, documentation, reporting, remediation follow-up, and stakeholder coordination.

The ideal candidate will bring strong experience with IT controls, SOC reporting, SOX compliance, information security, and cloud environments, along with the ability to independently manage complex audit projects and build strong relationships across IT, business, and external audit teams.

Key Responsibilities

• Lead and execute SOC 1, SOC 2, and SOX IT audit testing across mainframe, cloud, and distributed environments.

• Conduct assurance reviews and audits evaluating the design and operating effectiveness of business process and information technology controls.

• Manage key aspects of the audit lifecycle, including:

  • Planning and risk assessment

  • Control identification and documentation

  • Client and stakeholder coordination

  • Fieldwork and control testing

  • Data analysis

  • Work paper preparation and review

  • Audit reporting

  • Remediation and corrective action validation

• Develop a thorough understanding of business and IT processes and identify associated risks and internal controls.

• Test automated business process controls and IT general controls (ITGCs).

• Evaluate IT controls related to:

  • Logical access

  • Change management

  • IT operations

  • Application and infrastructure security

  • Information and data security

• Assess root causes, risk exposure, and mitigating or compensating controls associated with audit exceptions.

• Review audit work papers to ensure testing is documented accurately, consistently, and in accordance with audit standards.

• Coordinate audit activities with management, external auditors, and co-source providers.

• Discuss audit findings, business impact, and corrective action recommendations with project leadership and management.

• Track project timelines, milestones, deliverables, and audit status.

• Build strong relationships with business, technology, risk, and compliance stakeholders.

• Identify opportunities to continuously improve audit processes and internal controls.

• Provide guidance and support to other members of the Audit Services team during audit fieldwork.

Required Qualifications

• 3–5 years of relevant audit and/or risk management experience.

• Bachelor’s degree in Accounting, Auditing, Business Management, Information Technology, or a related field.

• Strong knowledge of auditing principles, practices, risk assessment, internal controls, and audit reporting.

• Significant experience with common internal control frameworks and guidance, including:

  • Sarbanes-Oxley (SOX)

  • SSAE 18

  • SOC 1 – Type I & Type II

  • SOC 2 – Type I & Type II

  • AICPA Trust Services Criteria

• Experience testing IT general controls, automated controls, and information security controls.

• Experience evaluating controls at the application, operating system, and database levels.

• Audit certification such as CIA, CISA, CISM, CISSP, CCAK, CPA, or another relevant certification.

• Strong project management skills with the ability to independently lead audit activities and manage competing priorities.

• Ability to prepare clear, concise, and accurate audit documentation and reports.

• 10–15% travel availability, including some international travel.

• Candidates must be legally authorized to work in the United States on a full-time basis without current or future visa sponsorship.

Preferred Experience

• Big Four or similar public accounting/audit firm experience.

• Experience auditing cloud-based environments and cloud controls.

• Knowledge of multiple internal control and technology frameworks, including:

  • NIST

  • Cloud Controls Matrix

  • AWS Cloud Adoption Framework

  • COBIT

  • FFIEC

  • PCI-DSS

  • ISO 27001

  • ITIL

• Experience within FinTech, Payment Processing, Merchant Acquiring, Card Issuing, Financial Services, or transaction processing environments.

• Experience executing large or complex regulatory compliance projects.

• Familiarity with AuditBoard or similar audit management software.

• Familiarity with Google Workspace and Microsoft Teams.

Skills & Attributes

• Strong expertise in SOC 1, SOC 2, SOX IT compliance, and ITGC testing.

• Knowledge of access controls, systems development, change management, IT operations, cloud fundamentals, and information security.

• Ability to identify risks, evaluate control design, execute testing, and determine control effectiveness.

• Strong analytical skills with the ability to identify root causes and practical remediation strategies.

• Excellent project management and organizational skills with the ability to manage audits from planning through completion.

• Strong written and verbal communication skills with the ability to tailor information to technical and non-technical audiences.

• Ability to communicate audit findings and recommendations effectively with control owners and leadership.

• Comfortable working independently with limited day-to-day direction.

• Strong relationship-building and cross-functional collaboration skills.

• Proactive, detail-oriented, and committed to delivering high-quality audit work.

#IT123