IT Auditor — SOX & ITGC Specialist

Sherwin-Williams; Cleveland (OH); On-site; USD 90,000 - 120,000; Full time

Job summary

Sherwin-Williams is seeking an IT Auditor to assess control design and effectiveness across the IT environment. You will perform IT general controls and business process control testing, document controls, and work with key IT and business stakeholders to maintain high standards of confidentiality.

The role supports internal audits of IT applications, ERP systems, cybersecurity, and infrastructure, with focus on risk-based audit programs and system conversions.

Qualifications

• Must have a bachelor's degree or higher, or 4+ years of professional experience in IT audit, IT compliance, IT risk management, or related fields.
• 1+ years of experience in Internal/External Audit or Information Technology.
• Knowledge of IT general controls and audit standards.
• General knowledge of business processes and application controls.
• Proficient with auditing operating systems (Linux, UNIX, Windows) and databases (Oracle, MS SQL).
• Experience with Microsoft Office (Excel, Word, Visio and PowerPoint).
• Must be legally authorized to work in the United States without sponsorship now or in the future.

Responsibilities

• Execute annual SOX compliance program.
• Perform ITGC and business process walkthroughs and test controls.
• Document key controls and interact with IT and business stakeholders.
• Support system conversions and SDLC assessments.
• Engage in IT risk assessments and audit programs.

Skills

IT general controls

Audit standards

Operating systems

Databases

Microsoft Office

IT audit experience

Education

Bachelor's degree or higher

Bachelor’s Degree in MIS/CS/Accounting/Finance (preferred)

Tools

Excel

Visio

PowerPoint

Job description

Sherwin-Williams is seeking an IT Auditor to assess control design and effectiveness across the IT environment. You will perform IT general controls and business process control testing, document controls, and work with key IT and business stakeholders to maintain high standards of confidentiality.

The role supports internal audits of IT applications, ERP systems, cybersecurity, and infrastructure, with focus on risk-based audit programs and system conversions.