Senior IT Audit Lead: ERP, Security & SOX

Synopsys; Philadelphia (Philadelphia County); On-site; USD 120,000 - 150,000; Full time

Job summary

Synopsys is seeking an experienced IT Auditor to plan and perform IT audits across infrastructure, applications, and security controls. You will lead risk assessments, evaluate ERP systems like SAP/Oracle, and test SOX IT Controls, translating technical issues into business risk language for senior management.

You will collaborate with Information Security and IT Operations to ensure comprehensive audit coverage and alignment with evolving risk.

Qualifications

• Bachelor's or Master's degree in Computer Science, Information Science, IT, or a related field

Responsibilities

• Plan and execute IT audits across infrastructure, applications, and security controls, working directly with system owners and IT teams to assess design and operating effectiveness
• Lead Risk Assessments that inform the annual IT audit plan, identifying where the company's technology exposure sits and what needs attention this year
• Develop and execute audits focused on technologies, including SAP and Oracle ERP, UNIX & Windows environments, cloud computing, cybersecurity, privacy, and emerging technologies (AI/ML)
• Test SOX General IT Controls and IT Application Controls, including evaluating access controls, change management, segregation of duties, and data integrity controls, documenting findings and working with process owners to drive remediation
• Evaluate IT processes and controls against regulatory requirements, internal policies, and frameworks like COBIT and NIST
• Prepare audit reports and present findings to senior management, translating technical issues into business risk language that drives action
• Collaborate with Information Security, IT Operations, and business teams to ensure audit coverage aligns with the company's evolving risk landscape

Job description

Synopsys is seeking an experienced IT Auditor to plan and perform IT audits across infrastructure, applications, and security controls. You will lead risk assessments, evaluate ERP systems like SAP/Oracle, and test SOX IT Controls, translating technical issues into business risk language for senior management.

You will collaborate with Information Security and IT Operations to ensure comprehensive audit coverage and alignment with evolving risk.