Senior IT Audit Specialist

SoTalent; Milwaukee (WI); On-site; USD 90,000 - 130,000; Full time

Job summary

Sotalent is seeking an IT Audit Senior Specialist to support planning, execution, and reporting of technology and cybersecurity audits. You will evaluate IT controls, identify risks, and provide recommendations to strengthen governance and compliance across business and technology teams.

Responsibilities include audit execution, testing, documentation, and reporting, with emphasis on access, change, configuration, data protection, disaster recovery, and cloud risk management.

Qualifications

• Bachelor's degree in Information Technology, Cybersecurity, MIS, Risk Management, Accounting, Finance, or related field.
• 3+ years of IT Audit, Cybersecurity Audit, Internal Audit, Technology Risk Management, Compliance, IT Operations or related governance/assurance functions.
• Strong understanding of IT controls, cybersecurity controls, and risk assessment methodologies.
• Familiarity with COBIT, NIST, ISO 27001, ITIL, IIA Standards.
• Experience evaluating technology environments and control structures.

Responsibilities

• Participate in technology, cybersecurity, and integrated audit engagements across various business and technology functions.
• Assist in audit planning activities, including risk assessments, process reviews, audit scoping, and development of testing procedures.
• Evaluate the design and operating effectiveness of technology and cybersecurity controls.
• Perform audit testing and evidence collection to support audit conclusions and recommendations.
• Ensure audit activities are executed in accordance with established audit methodologies and professional standards.
• Assess controls related to user access, change, configuration, data integrity, backup/recovery, BCM/DR, logging/monitoring, cloud/third-party risk, cybersecurity and vulnerability management.

Skills

IT Audit

Cybersecurity Audit

Internal Audit

Technology Risk Management

Compliance

IT Operations

Governance/Assurance

Education

Bachelor's degree in Information Technology or related field

Tools

COBIT

NIST

ISO 27001

ITIL

IIA Standards

Job description

Are you passionate about strengthening technology risk management, evaluating cybersecurity controls, and helping organizations maintain a strong control environment? We are seeking an IT Audit Senior Specialist to support the planning, execution, and reporting of technology and cybersecurity audits. This role offers the opportunity to assess IT controls, identify risks, provide recommendations for improvement, and collaborate with business and technology stakeholders to enhance governance, compliance, and operational effectiveness.

Key Responsibilities

IT & Cybersecurity Audit Execution

• Participate in technology, cybersecurity, and integrated audit engagements across various business and technology functions.
• Assist in audit planning activities, including risk assessments, process reviews, audit scoping, and development of testing procedures.
• Evaluate the design and operating effectiveness of technology and cybersecurity controls.
• Perform audit testing and evidence collection to support audit conclusions and recommendations.
• Ensure audit activities are executed in accordance with established audit methodologies and professional standards.
• Assess controls related to:
• User access management
• Change management
• Configuration management
• Data integrity and data protection
• Backup and recovery
• Business continuity and disaster recovery
• Logging and monitoring
• Cloud and third-party risk management
• Cybersecurity and vulnerability management
• Identify control weaknesses, process gaps, and opportunities for improvement.
• Evaluate technology risks and their potential impact on business operations and compliance objectives.

Audit Documentation & Reporting

• Prepare comprehensive audit workpapers that clearly document testing procedures, supporting evidence, findings, and conclusions.
• Develop audit observations and recommendations that effectively describe identified risks, root causes, and corrective actions.
• Maintain high-quality audit documentation that supports professional audit standards and review requirements.
• Assist in preparing audit reports and stakeholder communications.

Stakeholder Collaboration

• Conduct interviews and walkthroughs with business and technology personnel to understand processes and control environments.
• Communicate testing status, findings, and recommendations to audit team members and stakeholders.
• Present technical risks and control concerns in clear, business-friendly language.
• Foster productive working relationships with technology, cybersecurity, compliance, and business teams.
• Leverage data analysis and reporting tools to improve audit efficiency and effectiveness.
• Analyze operational and technology data to identify trends, anomalies, and control concerns.
• Support continuous improvement initiatives within audit and risk management programs.
• Contribute to the enhancement of audit methodologies and testing approaches.

Required Skills & Experience

• Bachelor's degree in Information Technology, Cybersecurity, Management Information Systems, Risk Management, Accounting, Finance, Business Administration, or a related field.
• 3+ years of experience in:
• IT Audit
• Cybersecurity Audit
• Internal Audit
• Technology Risk Management
• Compliance
• IT Operations
• Related governance or assurance functions
• Strong understanding of IT controls, cybersecurity controls, and risk assessment methodologies.
• Familiarity with audit and governance frameworks such as:
• COBIT
• NIST
• ISO 27001
• ITIL
• IIA Standards
• Experience evaluating technology environments and control structures.
• Strong analytical, problem-solving, and critical-thinking skills.
• Excellent written and verbal communication abilities.

Preferred Qualifications

• Experience working within large corporate audit functions, consulting organizations, public accounting firms, financial services companies, or regulated industries.
• Knowledge of:
• IT General Controls (ITGC)
• Cybersecurity governance
• Regulatory compliance programs
• Experience performing risk assessments and control testing in cloud environments.
• Familiarity with data analytics tools used in audit and risk management functions.