Senior IT Audit Lead — ERP/SOX & Risk

Synopsys Inc; Pennsylvania; On-site; USD 80,000 - 120,000; Full time

Job summary

Synopsys Inc. is seeking an experienced IT Auditor to plan and execute audits across infrastructure, applications, and security controls. You will engage with system owners and IT teams to assess design effectiveness and drive remediation.

You will lead risk assessments guiding the annual audit plan and develop audits focused on SAP, Oracle ERP, and diverse environments. The role requires strong analytical skills and COBIT/NIST experience, with SOX controls testing a plus.

Qualifications

• Bachelor's or Master's degree in Computer Science, Information Science, IT, or a related field.
• 5+ years of hands-on IT audits experience, including risk assessment and audit reporting.
• Working knowledge of SAP and Oracle ERP systems, particularly around access controls, change management, and application-level controls.
• Experience applying risk frameworks such as COBIT, NIST, or similar in audit planning and execution.
• Strong analytical skills to assess technology controls, identify gaps, and evaluate risk in complex IT environments.
• Experience testing SOX General IT Controls and IT Application Controls is a strong plus.
• Professional certifications such as CISA, CIA, or CISSP are highly valued.

Responsibilities

• Plan and execute IT audits across infrastructure, applications, and security controls, working directly with system owners and IT teams to assess design and operating effectiveness.
• Lead Risk Assessments that inform the annual IT audit plan, identifying where the company's technology exposure sits and what needs attention this year.
• Develop and execute audits focused on technologies, including SAP and Oracle ERP, UNIX & Windows environments, cloud computing, cybersecurity, privacy, and emerging technologies (AI/ML).
• Test SOX General IT Controls and IT Application Controls, including evaluating access controls, change management, segregation of duties, and data integrity controls, documenting findings and working with process owners to drive remediation.
• Evaluate IT processes and controls against regulatory requirements, internal policies, and frameworks like COBIT and NIST.
• Prepare audit reports and present findings to senior management, translating technical issues into business risk language that drives action.
• Collaborate with Information Security, IT Operations, and business teams to ensure audit coverage aligns with the company's evolving risk landscape.

Skills

IT audits

Analytical skills

SOX IT Controls

Risk assessment

COBIT & NIST

Education

Bachelor's or Master's in CS/IT

Tools

SAP

Oracle ERP

Job description

Synopsys Inc. is seeking an experienced IT Auditor to plan and execute audits across infrastructure, applications, and security controls. You will engage with system owners and IT teams to assess design effectiveness and drive remediation.

You will lead risk assessments guiding the annual audit plan and develop audits focused on SAP, Oracle ERP, and diverse environments. The role requires strong analytical skills and COBIT/NIST experience, with SOX controls testing a plus.