Senior IT Audit Lead — ERP & Security Risk

Synopsys, Inc.; Northern (KY); Hybrid; USD 90,000 - 130,000; Full time

Job summary

Synopsys, Inc. is seeking an experienced IT Auditor to plan and execute audits across infrastructure, applications, and security controls. You will partner with IT teams and process owners to assess design and operating effectiveness, focusing on ITGCs and SOX controls.

You will lead risk assessments, map control gaps to business impact, and deliver clear remediation plans. A strong grasp of COBIT/NIST frameworks and ERP systems helps drive a robust compliance posture.

Qualifications

• Bachelor's or Master’s degree in a related field (CS/IT/IS).
• 5+ years of hands-on IT/audit experience including risk assessment and reporting.
• Experience with SAP/Oracle ERP access controls and ITGC testing.
• Familiarity with COBIT/NIST frameworks in audit planning and execution.
• Strong analytical skills to identify gaps and assess risk in complex IT environments.
• Professional certifications such as CISA/CIA/CISSP are valued.

Responsibilities

• Plan and execute IT audits across infrastructure, applications, and security controls.
• Lead risk assessments informing the annual IT audit plan.
• Develop and execute audits focusing on SAP, Oracle ERP, UNIX/Windows, cloud, and security controls.
• Test SOX ITGCs and application controls, document findings, drive remediation.
• Evaluate IT processes against regulatory requirements and internal policies.
• Prepare audit reports and present findings to senior management.

Skills

IT Auditing

Risk Assessment

SOX Controls

Regulatory Compliance

Communication Skills

Education

Bachelor's or Master's in CS/IT/IS

Tools

SAP

Oracle ERP

COBIT

NIST

Job description

Synopsys, Inc. is seeking an experienced IT Auditor to plan and execute audits across infrastructure, applications, and security controls. You will partner with IT teams and process owners to assess design and operating effectiveness, focusing on ITGCs and SOX controls.

You will lead risk assessments, map control gaps to business impact, and deliver clear remediation plans. A strong grasp of COBIT/NIST frameworks and ERP systems helps drive a robust compliance posture.