Senior IT Auditor - IT Controls & SOX Compliance

Nichols College; Dudley (MA); On-site; USD 90,000 - 125,000; Full time

Job summary

Equity Bank is seeking an Internal Audit professional to assist in IT-focused audits and risk assessments. You will gather information, test IT controls, and ensure compliance with policies, laws, and SOX requirements.

The role requires strong documentation, communication, and analytical skills, with 3–6 years in financial services. Certification such as CISA/CISM/CISSP is preferred and you will work closely with management and regulators.

Qualifications

• Ability to fully document workpapers with sufficient evidence.
• Communicates audit scope and findings clearly.
• Form objective opinions on internal controls design and effectiveness.
• Familiar with audit methodologies and deliverables.
• Solid understanding of IT controls and governance.
• Experience with SOX IT controls and risk assessments.
• 3–6 years of audit experience in financial services.
• Professional certifications (CISA/CISM/CISSP) preferred.

Responsibilities

• Assist Chief Audit Executive in IT-focused audits.
• Gather and analyze information for risk assessments.
• Audit IT bank operations for policy, law, and governance compliance.
• Perform internal financial control audits under SOX.
• Draft audit reports with observations and recommendations.
• Coordinate with external auditors and regulators.

Skills

Documentation

Audit methodologies

Communication

Analytical thinking

MS Office

Education

Bachelor's degree in accounting or finance

Certifications such as CISA/CISM/CISSP preferred

Tools

NIST framework

COBIT framework

COSO framework

Job description

Equity Bank is seeking an Internal Audit professional to assist in IT-focused audits and risk assessments. You will gather information, test IT controls, and ensure compliance with policies, laws, and SOX requirements.

The role requires strong documentation, communication, and analytical skills, with 3–6 years in financial services. Certification such as CISA/CISM/CISSP is preferred and you will work closely with management and regulators.