Information Technology Auditor

Pinnacle Group, Inc.; Fort Worth (TX); On-site; USD 90,000 - 120,000; Full time

Job summary

Pinnacle Group, Inc. is seeking a Senior IT Compliance & Audit Analyst to support enterprise access governance, IT SOX compliance, and audit readiness.

You will collaborate with technology, security, business, audit, and compliance stakeholders to ensure effective IT general controls and remediation of identified gaps. The ideal candidate has experience with ITGCs, ITACs, and SDLC controls, along with identity governance and risk assessments across SAP, Workday, cloud platforms, and on-premise

Qualifications

• Requires strong background in IT Audit, SOX, access governance and risk management.
• Experience testing IT controls and supporting audit activities.
• Familiarity with identity governance and entitlement management.

Responsibilities

• Support IT SOX compliance across enterprise systems and infrastructure.
• Perform ITGCs, ITACs, and SDLC control testing.
• Lead user access reviews, SoD assessments, and remediation tracking.
• Coordinate with internal/external auditors and regulators during assessments.
• Document audit workpapers and present remediation progress to stakeholders.

Skills

IT Audit

SOX Compliance

Access Governance

Risk Management

IT General Controls

User Access Reviews

Identity Governance

Change Management

Segregation of Duties (SoD)

Data validity controls

Education

Bachelor's degree in information systems, computer science, cybersecurity, risk management, or related field

Tools

Saviynt

Sonrai Security

IGA solutions

Job description

Onsite interview required for final round

6-12 month contract role

Describe a great candidate that you are looking for and what skills and experience they will have:

A strong candidate will have a background in IT Audit, SOX Compliance, Access Governance, and Risk Management, with experience testing IT controls and supporting audit activities. They should be comfortable working with cross-functional teams, managing stakeholder relationships, analyzing large data sets, documenting audit results, and driving remediation efforts.

Experience with Identity Governance solutions and enterprise technologies such as SAP, Workday, cloud platforms, and Active Directory is highly desirable.

What is the team environment and structure like?:

The team operates in a highly collaborative environment and works closely with business stakeholders, application teams, cybersecurity teams, and external auditors to support IT SOX compliance, access governance, audit activities, and remediation efforts.

Frequent cross-functional engagement and stakeholder partnership are key aspects of the role.

Position Summary

The Senior IT Compliance & Audit Analyst is responsible for supporting enterprise access governance, IT SOX compliance, audit readiness, and supporting IT SOX relevant risk management activities across critical systems and infrastructure. This role partners with technology, security, business, audit, and compliance stakeholders to ensure effective SOX IT General controls, regulatory compliance, and remediation of identified gaps from IT SOX audit.

The ideal candidate will have experience in IT General Controls (ITGCs), user access reviews, SOX compliance, audit support, identity governance, and IT SOX risk assessments, with a strong understanding of access and change management controls across applications, databases, operating systems, cloud platforms, and infrastructure environments.

Key Responsibilities

Access Governance & Identity Management

• Conduct periodic user access reviews across applications, databases, cloud platforms, operating systems, and infrastructure environments.
• Facilitate access certification campaigns using established standard operating procedures and automated Identity Governance and Administration (IGA) solutions.
• Partner with management and system owners to design, review, and enhance role-based access controls (RBAC) and user provisioning processes to ensure compliance with policies.
• Assess user access appropriateness, identify excessive privileges, and support remediation of access-related risks.
• Support Segregation of Duties (SoD) reviews and identify potential conflicts across critical business systems.
• Develop familiarity and expertise with Identity Governance solutions such as:
• Saviynt
• Sonrai Security
• Other access governance and cloud entitlement management platforms

IT Audit & SOX Compliance

• Perform testing and evaluation of IT General Controls (ITGCs), IT Application Controls (ITACs), and System Development Life Cycle (SDLC) controls.
• Execute control testing related to:
• User access management
• Privileged access management
• Change management
• Data validity controls
• Interface controls
• Platform and infrastructure controls
• Segregation of Duties (SoD)
• Support all phases of SOX compliance activities, including planning, walkthroughs, test plan development, testing execution, documentation, and reporting.
• Conduct Test of Design (TOD) and Test of Operating Effectiveness (TOE) assessments for IT SOX controls supporting key business processes.
• Prepare clear, complete, and accurate audit workpapers in accordance with internal audit and compliance standards.
• Review IT SOX controls across enterprise technologies including SAP, Workday, Windows, Unix/Linux, databases, cloud services, and other critical applications.

Audit Coordination & Remediation Management

• Collaborate with internal auditors, external auditors, and regulatory examiners as needed during audit and assessment activities.
• Coordinate stakeholder support for audit requests, evidence collection, walkthroughs, and testing activities.
• Document IT SOX audit findings, control deficiencies, observations, recommendations, and management responses.
• Track remediation activities and drive resolution of IT SOX audit findings and control gaps through completion.
• Facilitate status meetings and provide reporting on remediation progress to management and leadership.
• Perform validation testing of remediation activities to confirm effectiveness and closure.

Governance & Stakeholder Engagement

• Collaborate with process owners, control owners, risk management teams, and technology leadership to strengthen enterprise control environments.
• Participate in governance meetings to address access management risks, IT SOX audit findings, and compliance requirements.
• Educate stakeholders on IT risk, SOX compliance responsibilities, access governance requirements, and control best practices.
• Review and evaluate policies, s

Bachelors degree in information systems Computer Science Cybersecurity Risk Management or a related field.

Experience in IT Audit SOX Compliance IT Risk Management Access Governance or Information Security.