IT Audit Senior

UGI Corporation; Pennsylvania; On-site; USD 80,000 - 100,000; Full time

Job summary

UGI Corporation is hiring a Senior IT Auditor to conduct IT operational and SOX compliance audits across the enterprise. This role emphasizes strong project management skills and communication capabilities as it involves collaboration with various stakeholders.

The ideal candidate should possess 3+ years of IT audit experience, specific SOX ITGC experience, and knowledge of cloud security and database systems. Opportunities are available for growth through leveraging automation and emerging technologies.

Qualifications

• 3+ years IT audit experience including operational audits and SOX.
• Knowledge of IT processes such as network and cloud security.
• Strong verbal and written communication skills.

Responsibilities

• Conduct IT operational audits, manage project timelines, and communicate with stakeholders.
• Execute SOX ITGC test procedures and document conclusions.
• Identify opportunities to enhance audit processes via automation.

Skills

IT audit experience

SOX ITGC experience

Cloud security

Project management skills

Communication skills

Tools

SQL

Oracle

SAP

AuditBoard

Job description

Position Summary

The Senior IT Auditor conducts IT operational audits (e.g., Cloud Security, Vulnerability Assessment, SDLC, BCP/DR) and SOX ITGC compliance audits across the UGI enterprise. This role requires strong project management skills, proactive verbal and written communication, and a willingness to leverage emerging technologies including AI-powered tools to enhance audit quality and efficiency.

Key Responsibilities

IT Operational Audits (40%)

• Develop risk and control matrices, audit approaches, and test procedures. Manage project timelines, coordinate with stakeholders, and proactively communicate status and deadlines to audit management.
• Execute test procedures and create concise, precise workpapers. Verify accuracy of all work product—including control owner assignments and data references—before submitting for review.
• Validate exceptions with auditees, collaborate on root cause analysis and remediation. Align with audit management on approach and messaging before drafting deliverables. Initiate discussions when timelines are at risk.
• Provide guidance to team members and lead project elements as needed.

SOX ITGC Compliance (40%)

• Schedule and lead walkthroughs with control owners to understand IT processes and the control environment. Execute ITGC test procedures and document conclusions in workpapers.
• Communicate and validate deficiencies with auditees, external auditors, and the audit team. Align with management before changing stakeholder commitments or deadlines.
• Maintain ongoing awareness of ITGC status throughout the SOX cycle by communicating regularly with KPMG, control owners, and the Internal Controls & Compliance Team. Follow up on remediation actions.
• Identify opportunities to enhance audit processes through automation and AI tools (e.g., Claude, data analytics platforms). Champion continuous improvement.

Other & Administrative (15%)

• Ad hoc projects, audit tool administration, time reporting, one-on-ones, and CPE requirements.
• Communicate verbally with confidence—raise issues, ask questions, and engage in discussion rather than relying solely on email.
• Acknowledge assignments promptly, provide timelines, and keep management informed through regular verbal check-ins and written updates without requiring follow-up.
• Prepare stakeholder-ready deliverables tailored to the audience.
• Receive feedback constructively and apply it consistently to future work, demonstrating measurable improvement.

Qualifications

Required:

• 3+ years IT audit experience (operational audits and SOX)
• 2+ years SOX ITGC experience
• Knowledge of IT processes: network, cloud security, OS, applications, databases, information security
• Knowledge of AICPA/IIA standards, COSO, and COBIT frameworks
• Working knowledge of common OS (Windows, UNIX/Linux), databases (SQL, Oracle), and ERP systems (SAP, JDE, Sage 100)
• Strong verbal and written communication skills—able to lead discussions, present findings, and engage stakeholders at all levels
• Strong project management skills—plan timelines, coordinate stakeholders, track deliverables, escalate proactively
• Attention to detail with disciplined self-review of work product
• Ability to internalize feedback and carry lessons into future work

Preferred:

• IT operational audit experience (Cloud Security, Vulnerability Assessment, SDLC, BCP/DR)
• CISA, CIA, or CISSP certification
• Energy/Utilities industry experience
• Familiarity with AuditBoard and data analytics tools
• Experience with AI-powered audit and productivity tools
• French and/or German language skills

All offers of employment are contingent upon the successful completion of a background check and drug screen, subject to applicable laws and regulations.

UGI Corporation is an Equal Opportunity Employer. The Company does not discriminate on the basis of race, color, sex, national origin, disability, age, gender identity, sexual orientation, veteran status, or any other legally protected class in its practices.

Nearest Major Market: Philadelphia

Job Segment: Project Manager, Audit, Database, ERP, Oracle, Technology, Finance