Lead and perform testing and validation of IT internal controls, including ITGCs, ITACs, and data-related controls, ensuring design, operating and compliance effectiveness
Independently validate management remediation plans and action closures, providing clear conclusions on adequacy and timeliness
Support the design and enhancement of IT controls, contributing to stronger governance and readiness for SOX or IPO environments
Coordinate with Finance and Internal Control teams to align testing results with overall ICFR requirements and ensure the reliability of financial reporting
Document and report testing outcomes in a clear, concise, and actionable manner for senior management and stakeholders
Conduct IT operational audits covering IT processes, cybersecurity, data privacy, and system management, from scoping to reporting
Provide risk-based recommendations that are practical for a scaling tech environment
Monitor emerging IT risks and regulatory trends to ensure the control framework remains effective and up to date
Act as a point of contact with management in IT audit matters, demonstrating independence and professionalism
Requirements
6 to 8 years of experience in IT audit, with a background in consultancy or audit firms such as the Big Four
Proven experience identifying and assessing IT risks, and designing, implementing, and testing internal controls
Track record of running IT operational audits independently from scoping through delivery to management
Strong knowledge of ITGCs, ITACs, data privacy, and data management
Experience working in scaling tech-driven organizations; exposure to SOX environments or IPO readiness is a strong plus
Ability to prepare clear, concise reports with actionable recommendations
Strong communication and interpersonal skills to engage effectively with management and stakeholders
Proactive, adaptable, and detail-oriented mindset with the ability to work independently