IT Auditor

JCW Group; United States; On-site; USD 70,000 - 90,000; Full time

Job summary

A leading investment management firm is seeking an IT Auditor to lead audits focused on SOC and SOX IT compliance in the U.S. This role requires 1-3 years of experience in IT audit or SOX compliance, strong documentation and communication skills, and knowledge of IT control frameworks. Ideal candidates will have relevant professional certifications. Full-time position with significant exposure to critical technology environments.

Qualifications

• 1–3 years of experience in IT audit, SOX compliance, or public accounting.
• Experience testing or managing SOX ITGCs and reviewing SOC reports.
• Strong understanding of IT control frameworks like COBIT, NIST, COSO.

Responsibilities

• Plan and execute risk‑based IT audits focusing on SOX and SOC control assessments.
• Evaluate effectiveness of IT general controls and change management.
• Prepare detailed audit findings and remediation recommendations.

Skills

IT audit

SOX compliance

Documentation skills

Communication skills

Stakeholder management

Education

Professional certifications (CISA, CPA, CIA, CISSP)

Job description

JCW is partnering with a boutique investment management firm seeking an IT Auditor to lead and execute audits focused on SOC 1/2 controls and SOX IT compliance across U.S. operations. This role offers exposure to critical technology environments supporting investment operations, trading platforms, and financial reporting systems, ensuring the integrity and reliability of the firm’s control environment.

Key Responsibilities

• Plan and execute risk‑based IT audits with a focus on SOX (ITGCs) and SOC 1/SOC 2 control assessments across applications, infrastructure, and vendor environments.
• Evaluate the design and operational effectiveness of IT general controls, including access management, change management, computer operations, and system development lifecycle.
• Partner with business process and external audit teams to ensure SOX IT dependencies are properly identified, tested, and documented.
• Review and assess third‑party service organization control (SOC) reports, including complementary user entity controls and subservice provider impacts.
• Prepare detailed audit findings, reports, and remediation recommendations for IT and business leadership.
• Support continuous improvement initiatives for IT control frameworks, audit methodologies, and documentation standards.
• Collaborate closely with technology, compliance, and risk teams to ensure regulatory alignment and consistent control coverage.

Ideal Candidate Profile

• 1–3 years of experience in IT audit, SOX compliance, or public accounting (Big 4 or similar preferred).
• Proven experience testing or managing SOX ITGCs and reviewing SOC 1/SOC 2 reports.
• Strong understanding of COBIT, NIST, COSO, and other IT control frameworks.
• Familiarity with financial services or investment management environments a plus.
• Excellent documentation, communication, and stakeholder management skills.
• Professional certifications such as CISA, CPA, CIA, or CISSP preferred (or in progress).

Contact

Tom Meberg partners with Audit & Technology Risk professionals nationwide. For more information, please contact [e-mail].

Seniority Level

Associate

Employment Type

Full‑time

Job Function

Accounting / Auditing

Industries

Investment Management, Investment Banking, and Financial Services