Senior IT Audit & Risk Assurance Lead

Elliott Davis; Raleigh (NC); On-site; USD 90,000 - 130,000; Full time

Benefits offered by this job

Generous paid time off

Flexible schedules

Maternity leave

Health benefits

Coaching

Career development programs

Beyond program

Job summary

Elliott Davis in Raleigh, NC is seeking an IT Audit Senior Associate to lead and execute IT audit engagements, assess technology risks, and communicate findings. You will work with client stakeholders and engagement leadership to design and test controls, including ITGCs, SOC reports, and remediation actions.

This role emphasizes coaching and collaboration within the audit team. The position offers growth in IT risk services, with opportunities to contribute to SOX compliance and technology risk

Qualifications

• Minimum 2–3 years in IT audit, technology risk, IT assurance, internal audit, public accounting, management consulting, or related discipline.
• Experience evaluating and testing IT General Controls (ITGCs) including controls over logical access, change management, and IT operations.
• Experience conducting process and control walkthroughs and evaluating design, implementation, and operating effectiveness of controls.
• Experience reviewing SOC 1 and SOC 2 reports and related third‑party technology risks.

Responsibilities

• Participate in planning and execution of IT audit engagements, including ITGCs, internal IT audits, SOX 404 support, SOC 1 and SOC 2 engagements, and other technology risk assessments.
• Develop understanding of clients' business processes, technology environments, systems, infrastructure, and relevant technology risks and controls.
• Facilitate process and control walkthroughs with client stakeholders to understand, evaluate, and document technology processes and control environments.
• Identify technology risks and the controls designed to mitigate those risks, considering their impact on business processes and the financial reporting control environment.
• Design and execute procedures to evaluate the design, implementation, and operating effectiveness of technology controls.
• Test ITGCs across enterprise applications, infrastructure, and cloud environments, including relevant logical access, change management, and IT operations controls.
• Evaluate automated controls, application controls, key reports, interfaces, and other IT‑dependent controls supporting business processes and audit objectives.
• Review and assess SOC 1 and SOC 2 reports for third‑party service providers, including relevant control objectives, complementary user entity controls, exceptions, and their impact on the client's control environment.
• Support technology advisory and risk engagements associated with system implementations, technology initiatives, and significant process or system changes.
• Analyze audit evidence, identify control deficiencies and process improvement opportunities, and assess the potential impact of identified issues.
• Develop practical recommendations to strengthen controls, mitigate risks, improve processes, and enhance operational efficiency.
• Assist in developing remediation action plans, monitoring remediation efforts, and validating the resolution of identified control deficiencies.

Skills

IT audit

Technology risk

SOX 404

SOC 1/2

IT General Controls (ITGCs)

Controls testing

Analytical skills

Communication skills

Project management

Team coaching

Education

Bachelor's degree in Accounting or related field

Master's degree in Information Systems or Accounting

Job description

Elliott Davis in Raleigh, NC is seeking an IT Audit Senior Associate to lead and execute IT audit engagements, assess technology risks, and communicate findings. You will work with client stakeholders and engagement leadership to design and test controls, including ITGCs, SOC reports, and remediation actions.

This role emphasizes coaching and collaboration within the audit team. The position offers growth in IT risk services, with opportunities to contribute to SOX compliance and technology risk