Senior IT Auditor: SOX & IT Controls

Array Technologies; Chandler (AZ); On-site; USD 90,000 - 130,000; Full time

Job summary

Array Tech, Inc. in Chandler, AZ is seeking a Senior Internal Auditor – Information Technology to lead risk-based IT audits, including SOX IT control testing, across systems, data, and security.

You will partner with IT, Finance, business process owners, external auditors, and leadership to evaluate control design and test operating effectiveness. The role requires strong technical audit knowledge, clear communication, and the ability to translate IT risks into actionable business

Qualifications

• Bachelor’s degree in IS/CS/Accounting/Finance/Business Admin.
• 5+ years IT audit, IT risk, SOX IT compliance or related experience.
• Strong knowledge of IT general controls and SOX IT requirements.
• Experience testing access management, change management, IT operations.
• Familiarity with COBIT, NIST, ISO, COSO governance frameworks.
• Experience with ERP systems and cloud environments.
• Clear written and verbal communication to non-technical stakeholders.
• Ability to manage multiple audits with limited supervision.

Responsibilities

• Execute IT audits covering IT general controls, application controls, cybersecurity, infrastructure, data integrity, cloud environments, and system governance.
• Perform SOX IT control testing, including walkthroughs, control design assessments, operating effectiveness testing, evidence review, deficiency documentation, and remediation follow-up.
• Evaluate access governance controls, including user access reviews, privileged access, segregation of duties, role design, access provisioning, access removal, and periodic recertification.
• Review change management controls, including system changes, approvals, testing evidence, migration activity, emergency changes, and change monitoring.
• Assess IT operations controls, including job monitoring, incident management, backup and recovery, disaster recovery, system availability, and service management processes.
• Evaluate application controls and automated controls within ERP systems, financial systems, and other key business applications.
• Assess risks related to ERP platforms, cloud services, databases, cybersecurity tools, integrations, and emerging technologies.
• Identify IT control gaps, process inefficiencies, risk exposure, and opportunities to strengthen the overall IT control environment.
• Prepare clear audit workpapers that support testing performed, evidence reviewed, conclusions reached, findings identified, and recommendations made.
• Draft audit findings and reports that clearly explain the issue, risk, root cause, business impact, and recommended corrective action.
• Communicate technical audit results to management in a clear, practical, and business-focused way.
• Partner with IT and business stakeholders to support timely remediation of deficiencies and sustainable control improvements.
• Assist with IT risk assessments, audit planning, test plan development, audit programs, and control scoping activities.
• Use data analytics, audit tools, and reporting techniques to identify trends, exceptions, anomalies, and areas of elevated risk.
• Monitor changes in IT audit standards, cybersecurity practices, regulatory requirements, SOX expectations, and control frameworks.
• Support special projects, system implementations, process improvement initiatives, investigations, and advisory reviews as assigned.

Skills

Analytical thinking

Problem solving

Documentation

Communication skills

Time management

Attention to detail

Stakeholder management

Education

Bachelor's degree in Information Systems / Computer Science / Accounting / Finance / Business Administration

Tools

SAP

Oracle

Workday

SQL

Azure

AWS

Job description

Array Tech, Inc. in Chandler, AZ is seeking a Senior Internal Auditor – Information Technology to lead risk-based IT audits, including SOX IT control testing, across systems, data, and security.

You will partner with IT, Finance, business process owners, external auditors, and leadership to evaluate control design and test operating effectiveness. The role requires strong technical audit knowledge, clear communication, and the ability to translate IT risks into actionable business