IT Audit Associate - Digital Risk Services

Elliott Davis; Charlotte (NC); On-site; USD 65,000 - 85,000; Full time

Benefits offered by this job

Generous time away

Flexible work schedules

Maternity/parental leave

Health and wellness benefits

Professional coaching

Career development programs

Beyond life enrichment program

Job summary

Elliott Davis is seeking an IT Audit Associate to support planning, execution, and completion of IT audit engagements. You will work with client teams to understand technology environments, gather evidence, test controls, and communicate findings.

This entry-level/early-career role emphasizes growth in IT risk and assurance practices. Responsibilities include testing IT general controls, supporting bank IT audits, drafting findings, and delivering high-quality client work papers.

Qualifications

• Bachelor’s degree in accounting, information systems, computer science, cybersecurity, business, or a related field is required.
• Zero to two years of relevant IT audit, internal audit or related experience; internship may be considered for entry-level.
• Foundational understanding of technology risks and internal controls; exposure to IT general controls or regulatory guidance is preferred but not required for entry-level.

Responsibilities

• Assist with planning and performing IT audits and document the technology environment, risks, and controls.
• Execute testing of IT general controls including access security, change management, and operations.
• Support bank IT audits using applicable regulatory guidance.
• Perform SOX IT control testing and related activities as assigned.
• Prepare workpapers describing procedures, evidence, results, and conclusions.
• Identify and help develop practical recommendations for control improvements.
• Communicate status, issues, and requests to the engagement team promptly.
• Participate in client meetings to understand processes and testing requests.
• Draft audit findings, risk assessments, and client deliverables.
• Build knowledge of client operations and evolving technology risks.
• Collaborate with team members and manage multiple engagements to meet deadlines.

Skills

Analytical thinking

Critical thinking

Organizational skills

Problem solving

Written communication

Verbal communication

Team collaboration

Education

Bachelor’s degree in accounting/information systems/computer science/cybersecurity/business/related field

Tools

Microsoft Word

Microsoft Excel

Job description

Who We Are

Elliott Davis pairs forward-thinking tax, assurance and consulting services with industry-leading workplace culture. Our nine offices — located in the fastest growing cities in the US — are built on a foundation of inclusivity, collaboration, and collective growth. We work daily to provide exceptional service to our people, customers, and our communities. Audit and assurance services are provided by Elliott Davis, LLC (doing business in NC and D.C. as Elliott Davis, PLLC), a licensed CPA firm.

Position Overview

The Digital Risk Services IT Audit Associate supports the planning, execution, and completion of information technology audit and advisory engagements. The position works with engagement teams and clients to understand technology environments, obtain and evaluate audit evidence, test controls, document results, and communicate exceptions. Engagements may include IT general control audits, bank IT audits using Federal Financial Institutions Examination Council guidance, and Sarbanes-Oxley information technology control audits. The role is designed for an entry-level or experienced associate who can take on increasing responsibility as skills and experience develop

Responsibilities

• Assist with planning and performing IT audits, including documenting the technology environment, systems, processes, risks, and controls.
• Execute testing of IT general controls, including access security, user administration, change management, computer operations, backup and recovery, and related governance controls.
• Support bank IT audits using applicable Federal Financial Institutions Examination Council guidance and other banking regulatory expectations.
• Perform Sarbanes-Oxley information technology control testing, including IT general controls, automated controls, information technology-dependent manual controls, and key report testing, as assigned.
• Obtain and review policies, procedures, system configurations, reports, screenshots, tickets, and other evidence; follow up with client contacts when additional support is needed.
• Prepare clear, complete, and accurate workpapers that describe the procedures performed, evidence reviewed, testing results, and conclusions reached.
• Identify potential control gaps or exceptions, evaluate their significance with the engagement team, and help develop practical recommendations.
• Communicate engagement status, open requests, identified issues, and scheduling concerns to the engagement team in a timely manner.
• Participate in client meetings and interviews to understand processes, gather information, and explain testing requests.
• Assist with drafting audit findings, recommendations, internal audit reports, risk assessments, and other client deliverables.
• Build knowledge of client operations, industry practices, applicable control frameworks, and emerging technology risks.
• Collaborate effectively with team members, accept coaching, and contribute to a consistent, high-quality client experience.
• Manage assigned tasks across multiple engagements and meet established deadlines and quality expectations.
• Perform other duties as assigned.

Required Qualifications

• Bachelor’s degree in accounting, information systems, computer science, cybersecurity, business, or a related field required.
• Zero to two years of relevant experience in IT audit, internal audit, external audit, risk consulting, information security, technology operations, or a related field. Internship experience may be considered for an entry-level candidate.
• Foundational understanding of technology risks, internal controls, and audit concepts. Exposure to IT general controls, Sarbanes-Oxley requirements, or bank regulatory guidance is preferred but not required for a lower-level associate.
• Professional certification, or progress toward a certification such as Certified Information Systems Auditor, Certified Internal Auditor, or Certified Public Accountant, is preferred but not required.
• Strong analytical, critical-thinking, organizational, and problem-solving skills.
• Clear written and verbal communication skills and the ability to interact professionally with clients and team members.
• Ability to learn new systems and audit approaches, manage multiple assignments, work both independently and as part of a team, and respond constructively to feedback.
• Proficiency with Microsoft Office applications, including Word and Excel.
• Access to reliable transportation for travel to assigned client locations, when required.
• Ability to work additional hours on occasion based on client and engagement needs.

WHY YOU SHOULD JOIN US

We believe that when our employees are able to thrive in all facets of life, their work and impact are that much greater.

That's Right – All Aspects Of Life, Not Just Your Life As An Employee, Because We Understand That There's Life Beyond Your Job. Here Are Some Of The Ways Our Work Works For Your Life, Your Growth, And Your Well-being

• generous time away and paid firm holidays, including the week between Christmas and New Year’s
• flexible work schedules
• 16 weeks of paid maternity and adoption leave, 8 weeks of paid parental leave, 4 weeks of paid and caregiver leave (once eligible)
• first-class health and wellness benefits, including wellness coaching and mental health counseling
• one‑on‑one professional coaching
• Leadership and career development programs
• access to Beyond: a one-of-a kind program with experiences that help you expand your life, personally and professionally

Ada Requirements

The physical and cognitive/mental requirements and the work environment characteristics described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

Physical Requirements

• Regularly required to remain in a stationary position; use hands repetitively to operate standard office equipment; and to talk or hear, both in person and by telephone
• Required to have specific vision abilities which include close vision, distance vision, color vision, peripheral vision, depth perception, and the ability to adjust focus

Cognitive/Mental Requirements

• Use written and oral communication skills.
• Read and interpret data, information, and documents.
• Observe and interpret situations.
• Work under deadlines with frequent interruptions; and
• Interact with internal and external customers and others in the course of work.