Senior IT Audit Analyst

Sherpa | Recruiting, Staffing & Consulting; Charlotte (NC); On-site; USD 117,000 - 143,000; Full time

Job summary

Sherpa is seeking a Senior IT Audit Analyst in the Charlotte, NC area for a 3 day in / 2 day out schedule. This role focuses on evaluating technology risks beyond traditional ITGC testing and gaining exposure to cybersecurity, automation, data analytics, and AI-enabled audit solutions.

You'll partner with IT, cybersecurity, and business stakeholders in a global technology environment, helping modernize the internal audit function and present findings to senior leadership.

Qualifications

• 3-6 years of experience in IT audit, technology risk, internal audit, or a related discipline.
• Strong understanding of ITGCs, SOX compliance, and internal audit methodologies.
• Experience with access management, change management, IT operations, and related control environments.
• Familiarity with frameworks such as COBIT, NIST, ISO 27001, or CIS Controls.

Responsibilities

• Lead and execute IT audit engagements from planning and risk assessment through testing, reporting, and follow-up.
• Perform and lead testing across core IT General Controls (ITGCs), including access management, change management, and IT operations.
• Evaluate control design and operating effectiveness while identifying risks, gaps, and opportunities for improvement.
• Support SOX ITGC testing, integrated audits, and special technology-focused projects.
• Partner with IT and cybersecurity teams to assess risks across cloud, on-premise, and hybrid environments.
• Leverage data analytics, automation, and AI tools to enhance audit efficiency, testing, and insights.
• Evaluate technology risks associated with ERP systems, cloud platforms, identity and access management, and other critical applications.
• Present audit findings and recommendations to management and senior leadership.
• Mentor junior team members and contribute to the continued development of the IT Audit function.

Skills

IT audit

SOX compliance

ITGCs

data analytics

cybersecurity concepts

Education

Bachelor’s degree in Information Systems, Accounting, Computer Science, or a related field

Job description

Compensation: To $130K.

Job Overview - Senior IT Audit Analyst - 34411

This is a 3 day in / 2 day out role in the Charlotte, NC area. Our client is not offering relocation assistance at this time.

We are partnering with a leading global organization to identify a Senior IT Audit Analyst who will play a key role in evaluating technology risks and strengthening the organization’s control environment. This is an excellent opportunity for an IT audit professional who wants to move beyond traditional ITGC testing and gain exposure to cybersecurity, emerging technology risk, automation, data analytics, and AI-enabled audit solutions.

You'll work in a complex, global technology environment and partner closely with IT, cybersecurity, and business stakeholders while helping modernize the internal audit function.

Key Responsibilities

• Lead and execute IT audit engagements from planning and risk assessment through testing, reporting, and follow-up
• Perform and lead testing across core IT General Controls (ITGCs), including access management, change management, and IT operations
• Evaluate control design and operating effectiveness while identifying risks, gaps, and opportunities for improvement
• Support SOX ITGC testing, integrated audits, and special technology-focused projects
• Partner with IT and cybersecurity teams to assess risks across cloud, on-premise, and hybrid environments
• Leverage data analytics, automation, and AI tools to enhance audit efficiency, testing, and insights
• Evaluate technology risks associated with ERP systems, cloud platforms, identity and access management, and other critical applications
• Present audit findings and recommendations to management and senior leadership
• Mentor junior team members and contribute to the continued development of the IT Audit function

Requirements

• 3-6 years of experience in IT audit, technology risk, internal audit, or a related discipline
• Strong understanding of ITGCs, SOX compliance, and internal audit methodologies
• Experience with access management, change management, IT operations, and related control environments
• Familiarity with frameworks such as COBIT, NIST, ISO 27001, or CIS Controls
• Working knowledge of cybersecurity concepts, including IAM, vulnerability management, and technology risk
• Experience with ERP systems, cloud platforms, and access controls
• Bachelor’s degree in Information Systems, Accounting, Computer Science, or a related field
• CISA preferred; CPA, CISSP, Security+, or other relevant certifications are a plus
• Strong analytical, communication, and problem-solving skills
• Ability to manage multiple priorities and work effectively in a global, matrixed organization
• Willingness to travel approximately 20-40%

Why This Opportunity?

This role offers more than traditional IT audit. You'll have the opportunity to expand your technology risk expertise, work alongside cybersecurity professionals, leverage AI and analytics, and influence how a global organization approaches technology risk and controls.

If you're an IT audit professional looking for greater exposure, broader responsibilities, and the opportunity to help shape the future of internal audit, this could be an excellent next step.

Additional Job Details

Workplace Policy:

Seniority Level: Associate.

Linked In Poster:

About Our Process

• We will notify you if you are selected as a candidate for this role. If not, but you fit our specializations, we'll consider you for future openings, and encourage you to apply for other Sherpa roles you're qualified for/interested in.
• Non-Local Candidates: Please note that you are competing with local candidates who don't require relocation expenses and can start quickly, so let us know if you have plans to move to the area soon.
• Candidates for all Sherpa opportunities must be authorized to work in the United States.
• Sherpa is an Equal Opportunity Employer.