IT Auditor

SUPERMICRO COMPUTER INC; San Jose (CA); On-site; USD 135,000 - 151,000; Full time

Job summary

Supermicro is seeking a skilled IT Auditor to plan and execute IT and technology-risk audits as an individual contributor within Internal Audit. You will assess IT controls, analytics, AI governance, and third-party risk, delivering concise reports and tracking remediation with management.

The role requires strong data analytics, familiarity with SOX, ISO 27001, and NIST, and experience with ERP environments such as SAP HANA.

Qualifications

• Bachelor’s degree in Information Security, Information Systems, Computer Science, Risk Management, Business, Finance, or related field preferred.
• 5 years of IT/internal audit experience (Big 4 or SOX risk) or equivalent.
• Ability to link business strategy to processes and IT controls and understand risk.
• Ability to assess design/effectiveness of IT controls and key systems.
• Proficiency in data analytics and visualization; Power BI preferred.
• Experience with security frameworks (NIST, ISO 27001, SOX ITGC).
• Familiarity with AI governance and AI-related risk.
• Experience auditing ERP environments (SAP HANA or comparable).
• Proficiency in SQL and Python; programming for data analytics.

Responsibilities

• Develop and execute IT audit work based on identified risks and regulatory requirements.
• Evaluate design and effectiveness of IT controls, IT general and application controls.
• Perform audit tests, including walkthroughs, data analysis, and interviews.
• Apply data analytics to scoping, population completeness, and testing.
• Document workpapers, findings and recommendations per standards.
• Ensure IT systems comply with SOX, ISO, NIST and internal policies.
• Assess security posture including IAM, data/network security, and vulnerability management.
• Evaluate AI governance practices and third‑party risk management.
• Prepare and present audit reports and track remediation with management.

Skills

IT audit

Data analytics

Power BI

Risk assessment

Regulatory awareness

SQL

Python

Stakeholder engagement

Communication

Education

Bachelor’s degree in related field

Tools

SAP HANA

Job description

Job Req ID: 30466

About Supermicro:

Supermicro is a Top Tier provider of advanced server, storage, and networking solutions for Data Center, Cloud Computing, Enterprise IT, Hadoop/ Big Data, Hyperscale, HPC and IoT/Embedded customers worldwide. We are the #5 fastest growing company among the Silicon Valley Top 50 technology firms. Our unprecedented global expansion has provided us with the opportunity to offer a large number of new positions to the technology community. We seek talented, passionate, and committed engineers, technologists, and business leaders to join us.

Job Summary:

Supermicro is seeking a skilled IT Auditor to plan and execute IT and technology-risk audits as an individual contributor within Internal Audit. In this role, you will focus on IT control testing, data analytics, security compliance, AI governance, third-party risk management (TPRM), and other IT operational audits. You will obtain background on the environment under review, perform risk and control assessments, define scope and objectives, evaluate the design and effectiveness of IT controls, and document findings to professional standards. You will assess alignment with requirements such as SOX, ISO 27001, and NIST, evaluate security posture, apply data analytics to testing, and review AI governance and third-party risk. You will present concise reports to management, track remediation, and stay current on emerging technologies and security threats.

Essential Duties and Responsibilities:

The responsibilities will include, but not limited to:

• Develop and execute IT audit work based on identified risks and regulatory requirements, including obtaining background information on the function or system being audited, performing a risk and control assessment, defining audit scope and objectives, and engaging stakeholders.
• Evaluate the design and effectiveness of IT controls, including IT general controls and application controls, to mitigate risks and support operational efficiency.
• Perform audit tests including walkthroughs, interviews, data analysis, and other procedures as applicable.
• Apply data analytics to scoping, population completeness, exception testing, and repeatable audit procedures.
• Document audit workpapers, findings, and recommendations in accordance with professional standards.
• Ensure IT systems and processes comply with relevant regulations, standards (e.g., SOX, ISO, NIST), and internal policies.
• Evaluate the security posture of IT systems, including identity and access management, data security, network security, cybersecurity, and vulnerability management.
• Assess AI governance practices, including inventory awareness, acceptable use controls, data handling for AI tools, human oversight, and alignment with internal and regulatory expectations.
• Perform TPRM-related audit work, including vendor control assessments, review of independent assurance reports, and evaluation of ongoing monitoring
• Conduct risk assessments related to emerging technologies, including cloud computing, big data, AI, and other relevant platforms.
• Identify opportunities for improvement in IT processes and controls and provide recommendations to management in a scheduled manner.
• Prepare and present clear and concise audit reports to management, highlighting key findings, risks, and recommendations.
• Effectively communicate and collaborate with IT professionals, business leaders, Security, Procurement, and external auditors.
• Track and follow up on the implementation of audit recommendations to ensure timely remediation of identified issues.
• Coordinate and deliver assigned reviews in a timely, efficient, and cost-effective manner without compromising quality.
• Stay abreast of emerging technologies, security threats, and regulatory changes to ensure audit practices remain current and effective.

Qualifications:

• Minimum Bachelor’s degree. Concentration in Information Security, Information Systems, Computer Science, Risk Management, Business, Finance, or related field is a plus.
• 5 years of relevant experience in IT and operational internal audit, public accounting (Big 4), and/or Sarbanes-Oxley; risk consulting or internal control functions (e.g., internal audit, compliance, fraud mitigation).
• Ability to link business strategy to key processes and controls and understand risk implications and IT impacts.
• Ability to assess the control design and effectiveness of key systems.
• Ability to assess programs and projects, including governance and solution designs.
• Have visibility of and understand the IT Roadmap and engage with Management on future developments.
• Understanding best practice IT program management requirements.
• Demonstrated use of data analytics and data visualization in audit, compliance, or risk testing. Experience with Power BI, or similar business intelligence tools required, with Power BI strongly preferred.
• Working knowledge of security compliance concepts and common frameworks (e.g., NIST, ISO 27001, SOX ITGC).
• Familiarity with TPRM/vendor risk assessment and audit
• Working knowledge of AI governance, responsible AI principles, AI‑related risks, and regulatory expectations. Experience using generative AI tools (e.g., Microsoft Copilot, ChatGPT, or similar technologies) to improve audit efficiency, analytics, reporting, and knowledge management is highly desirable.
• Experience in auditing SAP HANA or comparable ERP environments is a plus.
• Proficiency in SQL and at least one programming language commonly used in data analytics (Python preferred).
• CISA, CISSP, CISM, CIA, or comparable certification obtained or in progress is a plus.
• Demonstrates experience establishing regular and collaborative engagement across the organization with key risk stakeholders to drive risk awareness and transparency.

Salary Range

$135,000 – $151,000

The salary offered will depend on several factors, including your location, level, education, training, specific skills, years of experience, and comparison to other employees already in this role. In addition to a comprehensive benefits package, candidates may be eligible for other forms of compensation, such as participation in bonus and equity award programs.

EEO Statement

Supermicro is an Equal Opportunity Employer and embraces diversity in our employee population. It is the policy of Supermicro to provide equal opportunity to all qualified applicants and employees without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, protected veteran status or special disabled veteran, marital status, pregnancy, genetic information, or any other legally protected status.