IT Audit Principal

EPIND Epicor India; Austin (TX); On-site; USD 90,000 - 120,000; Full time

Job summary

EPIND Epicor India is seeking an IT Audit Principal in Austin, Texas, to lead audits and assess cybersecurity controls in line with SOX compliance. This role requires 8+ years of experience in IT audit, especially within the software industry, and strong analytical and communication skills.

Ideal candidates will possess relevant certifications and demonstrate proficiency in managing complex tasks while leveraging AI and automation tools for effective auditing.

Qualifications

• 8+ years of experience in IT audit, IT compliance, SOX, and/or cybersecurity.
• Experience in the Software industry is preferred.
• Relevant certifications such as CISA, CISSP, CISM, CRISC, CIA, or CPA.

Responsibilities

• Lead evaluation of ITGCs to ensure compliance with SOX requirements.
• Provide advisory in planning and execution of IT SOX testing activities.
• Monitor emerging cybersecurity threats and assess their impact.

Skills

IT audit

cybersecurity risk management

SOX compliance

strong analytical skills

excellent communication skills

Education

Bachelor’s degree in Information Systems, Cybersecurity, Accounting, Finance

Tools

Workiva Wdesk

GRC platforms

AI tools (ChatGPT, Copilot, Claude)

Job description

## IT Audit PrincipalApplyremote type: Onsitelocations: US, Austin Las Cimastime type: Full timeposted on: Posted Yesterdayjob requisition id: JR104552**What you'll be doing*** Lead the evaluation and ongoing monitoring of ITGCs to ensure adequate design, operating effectiveness, efficiency, and compliance with SOX requirements and regulatory expectations.* Assess cybersecurity controls that intersect with ITGC domains, including identity and access management, privileged access, logging/monitoring, vulnerability management, and incident response.* Drive evaluation of broader cybersecurity programs (e.g., NIST, ISO 27001) as dictated by our audit plan and underlying business objectives.* Provide thought leadership and partnered advisory in the planning, scoping, and execution of IT SOX testing activities, including risk assessments and control rationalization.* Evaluate System Development Life Cycle (SDLC) controls to ensure secure system implementation practices, including secure coding, change management, and vulnerability remediation.* Partner with cybersecurity teams to assess risks related to cloud environments, infrastructure, and applications, ensuring appropriate controls are designed and operating effectively.* Act as a liaison to external auditors for ITGC and cybersecurity-related audits, ensuring alignment and timely communication of findings.* Lead root cause analysis and provide recommendations for control deficiencies, including those related to cybersecurity incidents and/or control gaps.* Provide independent and objective advisory to IT and business stakeholders on control design, risk mitigation, and cybersecurity best practices.* Develop, review, and maintain IT control documentation, including process flows, narratives, and control matrices, ensuring alignment with both SOX and cybersecurity requirements.* Oversee and enhance the quarterly SOX certification process, incorporating cybersecurity risk considerations where applicable.* Monitor emerging cybersecurity threats, regulatory changes, and industry trends, and assess their impact on the organization’s control environment.* Enable continuous improvement initiatives across IT Audit and cybersecurity programs, including automation and deployment of new technologies.* Support executive leadership with special project advisory that inform strategic initiatives, risk assessments, and special transformational projects as needed.* Build and leverage AI solutions and workflows to enable capacity or unlock capability for an Internal Audit function.**What you'll likely bring*** 8+ years of progressive experience in IT audit, IT compliance, SOX, and/or cybersecurity risk management (public accounting and/or industry). Big 4 is a plus.* Specialized experience in the Software industry.* Bachelor’s degree in Information Systems, Cybersecurity, Accounting, Finance, or related field.* Relevant certifications such as CISA, CISSP, CISM, CRISC, CIA, or CPA (or equivalent).**What can set you apart*** Deep experience auditing or supporting systems such as Kinetic, SalesForce, Workday, Microsoft Azure (Entra ID), Active Directory, and different types of cloud environments (IaaS, PaaS, and SaaS).* Strong knowledge of ITGC domains (Access Management, Change Management, Interfaces, Backups, Disaster Recovery), SDLC, and their intersection with cybersecurity controls.* Deep experience performing cybersecurity audits.* Strong understanding of SOX requirements (e.g. 302, 404), principles-based internal control-integrated framework (COSO), IT Frameworks (e.g., COBIT) and cybersecurity control frameworks (e.g., NIST CSF, ISO 27001, CIS Critical Security Controls).* Understanding of data protection, privacy regulations, and secure architecture principles.* Experience leveraging automation and tools such as Workiva Wdesk, GRC platforms, and AI tools (ChatGPT, Copilot, Claude, etc.).* Strong analytical, problem-solving, and risk assessment skills.* Excellent communication and stakeholder management skills, with the ability to influence at all levels of the organization.* Ability to manage multiple priorities, execute complex tasks, and operate both strategically and tactically.