Senior IT Auditor

Nextech Solutions; Memphis (TN); Remote; USD 90,000 - 130,000; Full time

Job summary

Nextech Solutions is seeking a Senior IT Auditor to independently plan and execute risk-based technology audits, assessing unfamiliar systems and processes while delivering clear, well-supported findings. The role requires strong judgment and the ability to work with limited guidance during Central Time business hours.

The initial work includes a post-implementation review of a financial reconciliation application, learning its data flows, and identifying controls and gaps.

Qualifications

• Five or more years of progressive IT audit experience beyond routine SOX testing
• Experience owning audit work from planning through reporting
• Strong knowledge of IT risks, internal controls, ITGCs and audit methodologies
• Ability to learn unfamiliar systems quickly and adapt audit approaches
• Experience preparing risk/control matrices and audit programs
• Excel proficiency and data-analysis experience
• Strong written and verbal communication skills

Responsibilities

• Plan, scope, and execute risk-based IT audit procedures
• Assess IT risks and controls including access, change management, and related controls
• Develop audit procedures when standard programs are unavailable
• Interview auditees, document processes, identify controls and deficiencies
• Maintain risk/control matrices, audit programs, and workpapers with clear conclusions
• Use Excel and data-analysis tools to support testing and conclusions
• Develop findings and actionable recommendations with business context
• Work independently in a remote setting and meet delivery timelines

Skills

IT audit

Data analysis

Excel

Analytical thinking

Communication

Tools

Power Query

Optro

Job description

Senior IT Auditor

Location: Remote

Overview

We are seeking an experienced Senior IT Auditor to independently plan and execute risk-based technology audits, assess unfamiliar systems and processes, and deliver clear, well-supported findings. The role requires audit experience beyond routine SOX compliance testing, strong judgment, and the ability to contribute with limited technical guidance. You must be available during Central Time business hours.

Initial work is expected to include a post-implementation review of a financial reconciliation application, building on existing planning and carrying the audit through completion. You will need to learn how the system is used, understand its data flows and connections, and identify relevant controls and gaps.

Key Responsibilities

• Independently plan, scope, and execute risk-based IT audit procedures, including walkthroughs, control evaluations, and testing.
• Assess IT risks and controls, including logical and privileged access, change management, and other technology-related controls.
• Evaluate unfamiliar environments and develop appropriate audit procedures when established programs are unavailable or insufficient.
• Interview auditees, understand processes, identify existing controls, and recognize control deficiencies and emerging risks.
• Develop and maintain risk/control matrices, audit programs, testing documentation, and workpapers that clearly explain the work performed, evidence examined, and conclusions reached.
• Use Excel and relevant data-analysis tools to support audit testing and conclusions.
• Develop practical findings and recommendations, explain their business significance, and communicate results clearly.
• Work independently in a remote setting while maintaining regular checkpoints and meeting delivery and quality expectations.

Relevant frameworks and standards may include COBIT, COSO, NIST CSF, and/or applicable ISO standards, depending on the engagement. Experience with every listed framework is not required.

Required Qualifications

• Five or more years of progressive, hands‑on IT audit experience, including risk-based or operational auditing beyond routine SOX compliance testing.
• Experience independently owning audit work from planning and risk assessment through testing, documentation, and reporting.
• Strong knowledge of IT risks, internal controls, ITGCs, and audit methodologies.
• Ability to learn unfamiliar systems and processes quickly and develop appropriate audit approaches.
• Experience preparing risk/control matrices, audit programs, testing documentation, and understandable, defensible workpapers.
• Excel proficiency and experience using data analysis to support audit activities.
• Strong analytical, investigative, critical‑thinking, problem‑solving, and written and verbal communication skills.

Preferred Qualifications

• CISA certification; CISSP, CIA, CPA, or comparable certifications are also beneficial.
• Power Query proficiency or exposure to Optro.
• Big Four or similar audit‑firm experience.
• Experience auditing cybersecurity, IT operations, infrastructure, applications, or emerging technologies.
• Experience conducting advisory, operational, or other non‑SOX IT audit engagements.