We are looking for an experienced IT Auditor to join a SOX (Sarbanes-Oxley Act) compliance initiative supporting an Internationalization program. You'll play a key role in evaluating IT general controls (ITGCs) and application controls across critical systems used in finance and business operations. This role is a permanent role within Internal Audit & Controls post-project.
Key Responsibilities:
- Perform detailed testing of IT General Controls (ITGC) and IT Application Controls (ITAC) in accordance with SOX requirements.
- Perform detailed testing and evaluation of controls relevant to SOC reports.
- Execute detailed testing of ITGC in accordance with SOX:Access Management including multi-factor authentication, segregation of duties, provisioning/deprovisioning across diverse identity platforms, and management of privileged access using e.g Cyberark, CommonFate
Change Management (CI/CD pipelines, DevOps, Agile environments)
Computer Operations (cloud infrastructure, backup, incident management, and especially batch job monitoring process) - Conduct thorough testing of ITACs in transactional systems, such as:Booking platforms (e.g., reservation engines)
Revenue recognition systems and related data integration
Payment gateways and fraud detection logic
Customer data management and loyalty program applications - Apply knowledge of auditing cloud-based infrastructure (AWS, GCP, Azure) and SaaS-based platforms (e.g., Salesforce, Oracle Cloud, Workday)
Requirements:
- 3-5 years of IT audit or risk consulting experience with a primary focus on testing ITGC and ITAC in accordance with SOX requirement in high-transaction volume environments
- Knowledge of auditing digital product platforms, microservices architecture, and API-based workflows is highly desirable.
- Proven ability to independently execute all phases of ITGC and ITAC testing.
- Understanding of real-time transactional systems and high-availability environments.
- Familiarity with digital product platforms, microservices architecture, and API-based workflows.
- Experience auditing controls over customer-facing applications, payment integrations, and mobile/web platforms
