IT Auditor: AI Governance & Security Controls

Supermicro; Wayne (CA); On-site; USD 135,000 - 151,000; Full time

Job summary

Supermicro is seeking a skilled IT Auditor to plan and execute IT and technology-risk audits as an individual contributor within Internal Audit. You will focus on IT control testing, data analytics, security compliance, AI governance, third-party risk management (TPRM), and other IT operational audits.

You will assess alignment with SOX, ISO 27001, and NIST, evaluate security posture, and present concise reports to management, tracking remediation and staying current on threats and emerging

Qualifications

• Bachelor's degree in information security, IT, or related field.
• 5 years of IT/internal audit experience, preferably with SOX.
• Proficient in data analytics and visualization using Power BI.
• Strong knowledge of security frameworks (NIST, ISO 27001, SOX ITGC).
• Experience with AI governance and generative AI tools for audit efficiency.
• Experience auditing SAP HANA or ERP environments is a plus.

Responsibilities

• Develop and execute IT audit work based on identified risks and regulatory requirements.
• Evaluate IT controls and ITGCs to mitigate risks.
• Perform audit tests including walkthroughs, data analysis, and interviews.
• Apply data analytics to scoping and testing.
• Document workpapers, findings, and recommendations.
• Present audit reports to management and track remediation.
• Coordinate reviews with IT, Security, Procurement, and external auditors.
• Stay current on emerging technologies and security threats.

Skills

Data analytics

IT auditing

Risk assessment

Regulatory knowledge

AI governance

Education

Bachelor's degree

CISA/CISSP/CISM/CIA or equivalent

Tools

Power BI

SQL

Python

Job description

Supermicro is seeking a skilled IT Auditor to plan and execute IT and technology-risk audits as an individual contributor within Internal Audit. You will focus on IT control testing, data analytics, security compliance, AI governance, third-party risk management (TPRM), and other IT operational audits.

You will assess alignment with SOX, ISO 27001, and NIST, evaluate security posture, and present concise reports to management, tracking remediation and staying current on threats and emerging