Senior IT Audit Lead: SOX, Cloud & AI Risk

FICO; San Diego (CA); Hybrid; USD 81,000 - 127,000; Full time

Benefits offered by this job

Inclusive culture

Competitive compensation

Work-life balance

Employee resource groups

Job summary

FICO is seeking an experienced IT Audit Lead in the United States to own end-to-end IT audit coverage for financial applications, cloud platforms and security tooling. You will scope, test and validate controls, and drive remediation with process owners.

The role emphasizes SOX 404, SoD analysis and automation to make audits repeatable and monitorable. Collaboration with IT, Security and Finance is essential.

Qualifications

• Bachelor’s degree in information technology, information systems, computer science, accounting or a related field; equivalent practical experience will be considered.
• Approximately 3–5 years of progressive IT audit experience in tech, SaaS or financial services.
• Hands-on experience testing ITGC and SOX 404, including ERP controls and cloud platforms.
• Experience with AI/automation to modernize audit processes and data analysis.

Responsibilities

• Lead IT audit engagements end to end with scoping, walkthroughs, tests and remediation validation.
• Own SOX 404 IT general controls program across applications and infrastructure.
• Test IT controls, reports, interfaces and data supporting financial reporting.
• Perform SoD analyses and automate data extraction and normalization where possible.
• Audit identity and access management and cloud security controls across AWS/Azure/GCP.
• Evaluate change and release controls in DevOps toolchains and ITSM platforms.
• Assist third-party risk reviews and mapping of SOC controls.

Skills

IT audit

SOX 404 testing

ERP controls

Cloud security

Python scripting

SQL queries

Data analytics

Power BI

Communication

Education

Bachelor’s degree in IT/IS/CS/Accounting

Tools

Oracle

SAP

NetSuite

AWS

Power BI

Jira

ServiceNow

Job description

FICO is seeking an experienced IT Audit Lead in the United States to own end-to-end IT audit coverage for financial applications, cloud platforms and security tooling. You will scope, test and validate controls, and drive remediation with process owners.

The role emphasizes SOX 404, SoD analysis and automation to make audits repeatable and monitorable. Collaboration with IT, Security and Finance is essential.