Senior IT Audit Lead — SOX & Cybersecurity Controls

Eliassen Group; King of Prussia (PA); On-site; USD 125,000 - 135,000; Full time

Job summary

Eliassen Group is seeking an experienced IT Audit Manager to lead technology-focused internal audits in a highly regulated environment. The role covers IT controls, SOX ITGC testing, and cybersecurity risk, with responsibility for remediation and reporting to senior management.

The position emphasizes leadership of audit engagements, collaboration with IT and process owners, and the development of practical controls and continuous improvement initiatives.

Qualifications

• Bachelor’s degree in a related field.
• 7+ years of IT audit, risk, or IT compliance experience.
• Experience leading IT audit engagements.
• Strong hands-on SOX ITGC testing experience.
• Experience evaluating access management, change management, IT operations.
• Familiarity with COSO, COBIT, and NIST frameworks.
• Excellent written and verbal communication skills.
• Ability to manage multiple priorities across teams.

Responsibilities

• Lead risk-based IT audit engagements from planning through remediation.
• Develop audit programs for IT processes, apps, infrastructure, and security controls.
• Assess ITGCs and ITACs design and operating effectiveness.
• Evaluate controls: access management, change management, IT operations, system development, governance.
• Coordinate with IT, process owners, compliance, and external auditors for SOX.
• Lead and execute SOX ITGC testing supporting financial reporting.
• Drive technology risk assessments across apps, infra, cybersecurity, and resilience.
• Provide leadership, coaching, and guidance to audit staff.
• Present findings to management and track remediation progress.

Skills

IT Audit

SOX ITGC

Cybersecurity controls

Risk assessment

Leadership

Education

Bachelor's degree in Accounting/IS/IT/CS/Finance

Tools

SAP

Oracle

GRC platforms

Job description

Eliassen Group is seeking an experienced IT Audit Manager to lead technology-focused internal audits in a highly regulated environment. The role covers IT controls, SOX ITGC testing, and cybersecurity risk, with responsibility for remediation and reporting to senior management.

The position emphasizes leadership of audit engagements, collaboration with IT and process owners, and the development of practical controls and continuous improvement initiatives.