IT Audit Senior

AquantUs, LLC.; Alpharetta (GA); On-site; USD 110,000 - 160,000; Full time

Job summary

AquantUs, LLC. seeks an IT Audit Senior to execute testing of IT general controls for SOC 1/2 readiness and IT SOX across mainframe, cloud, and distributed environments. You will work with IT and business leaders to document controls and drive effective testing processes.

The role involves leading fieldwork, reporting findings, and advising on remediation with potential 10–15% travel to client sites. Strong knowledge of SOX, SOC, and cloud/audit frameworks is required.

Qualifications

• Bachelor’s degree in Accounting, Audit, IT, or Information Security.
• 3+ years in Public Accounting, Financial Services, or FinTech audits.
• Experience with SOX, SOC 1 and 2 readiness and reports.
• Cloud security auditing, specifically AWS.
• Mainframe auditing across IT infrastructure, operations, and security.
• Certifications such as CPA/CISA/CISM/CISSP or CIA.
• Willing to travel 10–15%.

Responsibilities

• Execute testing of IT general controls for SOC 1 and SOC 2 reports.
• Assess IT SOX general controls across mainframe, cloud and distributed environments.
• Document controls and coordinate with IT and business leaders.
• Lead audit planning, fieldwork, data analysis, and reporting.
• Evaluate control design, operating effectiveness, and remediation actions.

Skills

SOX / SOX controls

SOC 1 & SOC 2 testing

AICPA Trust Services Criteria

Cloud security auditing (AWS)

Mainframe auditing

IT controls testing

Education

Bachelor's degree in Accounting, Audit, IT, or Information Security

Job description

Summary

TheIT Audit Senior will be responsible for the execution of testing of IT general controls for existing and new SOC 1 and SOC 2 reports and IT SOX general controls across the mainframe, cloud, and distributed environments.

Responsibilities

• Workwith internal business leaders to understand the current mainframe, distributed, and AWS cloud environments to document controls in support of SOC and SOX scope.
• Fosterand maintainstrong relationships throughout the company to support audit execution responsibilities. Viewed as a partner with IT and business leaders to understand the business and assist in designing and delivering the required audit services to meet business, customer, and regulatory requirements.
• Conduct assurance reviews and audits to evaluate the design and effectiveness of controls supporting the company’s business processes and information systems.
• Lead and execute all aspects of the audit process, including planning, risk assessment, controls identification, client coordination, fieldwork, data analysis, work paper documentation, reporting, and remediation validation, with direction from senior team members.
• Identify new and assess existing information technology control design and operating effectiveness, particularly related to application and infrastructure logical access, change management, and operations, as well as more common information security considerations.
• Evaluate root cause factors, extent of risk, and mitigating/compensating controls for audit testing exceptions and work with internal leaders to craft management responses for SOC reporting.
• Partnerwith the Project Manager to assess the adequacy of the corrective action(s) taken by management, stakeholders, or process owners to improve governance, risk management, and control issues.
• Discussaudit results, their impact,and recommendations for corrective actions with the Project Manager, external audit partners, and/or management.

Requirements

• Bachelor’s degree in Accounting, Audit, Business Management, Information Technology, or Information Security.
• 3+ years of Public Accounting, Financial Services, or Financial Technology audit or other related work experience.
• Significant experience and expertise with common internal control frameworks and guidance, including Sarbanes-Oxley, SOC 1 and SOC 2 (readiness, type 1, and type 2 reports), and AICPA Trust Services Criteria for a SOC 2.
• Cloud security framework auditing (specifically as related to AWS).
• Mainframe auditing, including IT infrastructure design, management, operations, and security.
• CIA, CISA, CISM, CISSP, CCAK, CPA, or other relevant certifications.
• Ability for 10-15% travel.