Senior IT Audit & Risk Analyst — Hybrid (Charlotte)

Sherpa | Recruiting, Staffing & Consulting; Charlotte (NC); On-site; USD 117,000 - 143,000; Full time

Job summary

Sherpa is seeking a Senior IT Audit Analyst in the Charlotte, NC area for a 3 day in / 2 day out schedule. This role focuses on evaluating technology risks beyond traditional ITGC testing and gaining exposure to cybersecurity, automation, data analytics, and AI-enabled audit solutions.

You'll partner with IT, cybersecurity, and business stakeholders in a global technology environment, helping modernize the internal audit function and present findings to senior leadership.

Qualifications

• 3-6 years of experience in IT audit, technology risk, internal audit, or a related discipline.
• Strong understanding of ITGCs, SOX compliance, and internal audit methodologies.
• Experience with access management, change management, IT operations, and related control environments.
• Familiarity with frameworks such as COBIT, NIST, ISO 27001, or CIS Controls.

Responsibilities

• Lead and execute IT audit engagements from planning and risk assessment through testing, reporting, and follow-up.
• Perform and lead testing across core IT General Controls (ITGCs), including access management, change management, and IT operations.
• Evaluate control design and operating effectiveness while identifying risks, gaps, and opportunities for improvement.
• Support SOX ITGC testing, integrated audits, and special technology-focused projects.
• Partner with IT and cybersecurity teams to assess risks across cloud, on-premise, and hybrid environments.
• Leverage data analytics, automation, and AI tools to enhance audit efficiency, testing, and insights.
• Evaluate technology risks associated with ERP systems, cloud platforms, identity and access management, and other critical applications.
• Present audit findings and recommendations to management and senior leadership.
• Mentor junior team members and contribute to the continued development of the IT Audit function.

Skills

IT audit

SOX compliance

ITGCs

data analytics

cybersecurity concepts

Education

Bachelor’s degree in Information Systems, Accounting, Computer Science, or a related field

Job description

Sherpa is seeking a Senior IT Audit Analyst in the Charlotte, NC area for a 3 day in / 2 day out schedule. This role focuses on evaluating technology risks beyond traditional ITGC testing and gaining exposure to cybersecurity, automation, data analytics, and AI-enabled audit solutions.

You'll partner with IT, cybersecurity, and business stakeholders in a global technology environment, helping modernize the internal audit function and present findings to senior leadership.