IT Internal Auditor

Job Summary

We are seeking an experienced IT Internal Auditor to assess information technology controls, identify risks, and evaluate the effectiveness of IT processes and systems. The ideal candidate will have hands-on experience with ACL data analytics tools, along with knowledge of IT general controls, application controls, and audit methodologies.

Key Responsibilities

·         Plan and execute IT audits based on risk assessments and organizational objectives.

·         Evaluate IT General Controls (ITGCs), including access management, change management, IT operations, backup, and security controls.

·         Assess application controls and business processes to identify control gaps and risks.

·         Use ACL (Audit Command Language) to extract, analyze, and validate large volumes of data.

·         Develop ACL scripts to perform data testing, identify exceptions, duplicates, unusual transactions, and control violations.

·         Perform continuous auditing and data analytics to identify trends, anomalies, and potential risks.

·         Review user access, segregation of duties, privileged access, and system activity logs.

·         Test the completeness and accuracy of data used in audit procedures.

·         Document audit procedures, findings, evidence, risks, and recommendations.

·         Prepare clear audit reports and communicate findings to management and stakeholders.

·         Track remediation activities and perform follow-up testing.

·         Support compliance audits related to frameworks and regulations such as COBIT, ISO 27001, PCI DSS, or applicable regulatory requirements.

·         Collaborate with internal audit team members, information security, risk management, compliance, and IT teams.

Required Qualifications

·         Bachelor’s degree in Information Technology, Computer Science, Accounting, Finance, or a related field.

·         Experience in IT auditing, internal auditing, technology risk, or information security.

·         Practical experience using ACL for audit data analysis.

·         Strong understanding of ITGCs and application controls.

·         Knowledge of risk-based audit methodologies and internal control frameworks.

·         Strong analytical, problem-solving, documentation, and communication skills.

Preferred Certifications

·         CISA – Certified Information Systems Auditor

·         CIA – Certified Internal Auditor

·         CRISC – Certified in Risk and Information Systems Control

·         ISO 27001 - information security management systems (ISMS)

·         Or other relevant information-security certification