IT Audit Associate - Digital Risk Services

Elliott Davis; Raleigh (NC); On-site; USD 60,000 - 80,000; Full time

Job summary

Elliott Davis is seeking an IT Audit Associate for our Digital Risk Services practice in Raleigh, NC. The role supports planning, execution, and completion of IT audit engagements across general controls, bank IT audits, and SOX IT controls. Open to entry-level and more experienced candidates who can grow with increasing responsibility.

The position emphasizes collaboration, quality client service, and ongoing development within a supportive team. Travel may be required to meet client needs.

Qualifications

• Bachelor’s degree in accounting, information systems, computer science, cybersecurity, business, or a related field.
• Zero to two years of IT audit, internal audit, external audit, risk consulting, information security, or a related field.
• Foundational understanding of technology risks, internal controls, and audit concepts; exposure to IT general controls, SOX, or banking guidance preferred.
• Professional certification progress toward CISA, CIA, or CPA preferred but not required.
• Strong analytical, critical-thinking, organizational, and problem-solving skills.
• Clear written and verbal communication skills and ability to interact professionally with clients and team members.
• Proficiency with Microsoft Office applications, including Word and Excel.
• Access to reliable transportation for travel to client locations, when required.
• Willingness to work additional hours as needed.

Responsibilities

• Assist with planning and performing IT audits, documenting environment, systems, processes, risks, and controls.
• Execute testing of IT general controls: access security, user administration, change management, operations, backup and recovery.
• Support bank IT audits using FFIEC guidance and banking regulatory expectations.
• Perform SOX IT control testing: IT general controls, automated controls, IT-dependent manual controls, and key report testing.
• Obtain and review policies, configurations, reports, screenshots, tickets; follow up for additional support.

Skills

Analytical skills

Critical thinking

Written and verbal communication

Organization

Problem solving

Interpersonal skills

Team collaboration

Learning agility

Time management

Client interaction

Education

Bachelor’s degree in accounting, information systems, computer science, cybersecurity, business, or related field

Tools

Microsoft Office

Job description

Who We Are

Elliott Davis pairs forward-thinking tax, assurance and consulting services with industry-leading workplace culture. Our nine offices — located in the fastest growing cities in the US — are built on a foundation of inclusivity, collaboration, and collective growth. We work daily to provide exceptional service to our people, customers, and our communities. Audit and assurance services are provided by Elliott Davis, LLC (doing business in NC and D.C. as Elliott Davis, PLLC), a licensed CPA firm.

Position Overview

The Digital Risk Services IT Audit Associate supports the planning, execution, and completion of information technology audit and advisory engagements. The position works with engagement teams and clients to understand technology environments, obtain and evaluate audit evidence, test controls, document results, and communicate exceptions. Engagements may include IT general control audits, bank IT audits using Federal Financial Institutions Examination Council guidance, and Sarbanes-Oxley information technology control audits. The role is designed for an entry-level or experienced associate who can take on increasing responsibility as skills and experience develop

Responsibilities

• Assist with planning and performing IT audits, including documenting the technology environment, systems, processes, risks, and controls.
• Execute testing of IT general controls, including access security, user administration, change management, computer operations, backup and recovery, and related governance controls.
• Support bank IT audits using applicable Federal Financial Institutions Examination Council guidance and other banking regulatory expectations.
• Perform Sarbanes-Oxley information technology control testing, including IT general controls, automated controls, information technology-dependent manual controls, and key report testing, as assigned.
• Obtain and review policies, procedures, system configurations, reports, screenshots, tickets, and other evidence; follow up with client contacts when additional support is needed.
• Prepare clear, complete, and accurate workpapers that describe the procedures performed, evidence reviewed, testing results, and conclusions reached.
• Identify potential control gaps or exceptions, evaluate their significance with the engagement team, and help develop practical recommendations.
• Communicate engagement status, open requests, identified issues, and scheduling concerns to the engagement team in a timely manner.
• Participate in client meetings and interviews to understand processes, gather information, and explain testing requests.
• Assist with drafting audit findings, recommendations, internal audit reports, risk assessments, and other client deliverables.
• Build knowledge of client operations, industry practices, applicable control frameworks, and emerging technology risks.
• Collaborate effectively with team members, accept coaching, and contribute to a consistent, high-quality client experience.
• Manage assigned tasks across multiple engagements and meet established deadlines and quality expectations.
• Perform other duties as assigned.

Required Qualifications

• Bachelor’s degree in accounting, information systems, computer science, cybersecurity, business, or a related field required.
• Zero to two years of relevant experience in IT audit, internal audit, external audit, risk consulting, information security, technology operations, or a related field. Internship experience may be considered for an entry-level candidate.
• Foundational understanding of technology risks, internal controls, and audit concepts. Exposure to IT general controls, Sarbanes-Oxley requirements, or bank regulatory guidance is preferred but not required for a lower-level associate.
• Professional certification, or progress toward a certification such as Certified Information Systems Auditor, Certified Internal Auditor, or Certified Public Accountant, is preferred but not required.
• Strong analytical, critical-thinking, organizational, and problem-solving skills.
• Clear written and verbal communication skills and the ability to interact professionally with clients and team members.
• Ability to learn new systems and audit approaches, manage multiple assignments, work both independently and as part of a team, and respond constructively to feedback.
• Proficiency with Microsoft Office applications, including Word and Excel.
• Access to reliable transportation for travel to assigned client locations, when required.
• Ability to work additional hours on occasion based on client and engagement needs.

WHY YOU SHOULD JOIN US

We believe that when our employees are able to thrive in all facets of life, their work and impact are that much greater.

That's Right – All Aspects Of Life, Not Just Your Life As An Employee, Because We Understand That There's Life Beyond Your Job. Here Are Some Of The Ways Our Work Works For Your Life, Your Growth, And Your Well-being

• generous time away and paid firm holidays, including the week between Christmas and New Year’s
• flexible work schedules
• 16 weeks of paid maternity and adoption leave, 8 weeks of paid parental leave, 4 weeks of paid and caregiver leave (once eligible)
• first-class health and wellness benefits, including wellness coaching and mental health counseling
• one‑on‑one professional coaching
• Leadership and career development programs
• access to Beyond: a one-of-a kind program with experiences that help you expand your life, personally and professionally

Ada Requirements

The physical and cognitive/mental requirements and the work environment characteristics described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

Physical Requirements

• Regularly required to remain in a stationary position; use hands repetitively to operate standard office equipment; and to talk or hear, both in person and by telephone
• Required to have specific vision abilities which include close vision, distance vision, color vision, peripheral vision, depth perception, and the ability to adjust focus

Cognitive/Mental Requirements

• Use written and oral communication skills.
• Read and interpret data, information, and documents.
• Observe and interpret situations.
• Work under deadlines with frequent interruptions; and
• Interact with internal and external customers and others in the course of work.