Senior IT Internal Auditor

Oliver James Group; Virginia; On-site; USD 110,000 - 150,000; Full time

Job summary

Oliver James Group is seeking a Senior IT Internal Auditor to join its Internal Audit function. This role focuses 60% on SOX and 40% IT Internal Audit and Advisory, blending hands-on testing with strategic advisory work.

You will strengthen IT audit capabilities, partner with external auditors and business stakeholders, and advise on cybersecurity, AI governance, technology implementations, and IT risk across the organization.

Qualifications

• Approximately 5 years of IT Audit and/or SOX experience.
• Strong hands-on experience with SOX testing and IT General Controls.
• Experience with PCAOB requirements and external auditors.
• Based in the Eastern Time Zone and authorized to work in the U.S. without sponsorship.

Responsibilities

• Execute SOX testing across key IT controls, including change management and security controls.
• Support risk-based IT Internal Audit and advisory engagements.
• Perform walkthroughs and evaluate design and operating effectiveness of controls.
• Identify control gaps and provide recommendations to improve the control environment.
• Partner with external auditors on SOX and PCAOB-related requirements.

Skills

SOX testing

IT General Controls

Audit methodologies

Stakeholder management

Job description

• This role does not offer sponsorship and requires U.S. work authorization
• This role does not offer sponsorship and requires U.S. work authorization

Job Summary / Introduction

A growing publicly traded organization is seeking a Senior IT Internal Auditor to join its expanding Internal Audit function. This role offers a broad 60% SOX and 40% IT Internal Audit and Advisory focus, providing the opportunity to combine hands-on testing with more strategic advisory work.

The successful candidate will play an important role in strengthening the organization’s IT audit capabilities, partnering with external auditors and business stakeholders, and providing recommendations around emerging technology and control risks.

This is an excellent opportunity for an IT auditor looking to move beyond traditional compliance testing and gain broader exposure to cybersecurity, AI governance, technology implementations, business continuity, and IT risk.

Detailed Job Description

• ExecuteSOX testing across key IT controls, including:
  • Change management
  • Security controls
  • System development and implementation controls
  • Computer operations
  • Database security
  • Network security
• Support risk-based IT Internal Audit and advisory engagements.
• Perform walkthroughs and evaluate the design and operating effectiveness of controls.
• Identify control gaps and provide practical recommendations to improve the overall control environment.
• Partner with external auditors on SOX and PCAOB-related requirements.
• Advise stakeholders on emerging technology and control risks, including AI, cybersecurity, and system implementations.
• Support reviews of new system implementations and post-implementation controls.
• Contribute to business continuity and technology risk assessments.
• Identify opportunities to improve the efficiency and effectiveness of the SOX and internal control framework.
• Build strong relationships with business and technology stakeholders across multiple regions.
• Help develop and mature the organization’s IT Internal Audit capabilities.

Skills & Experience

• Approximately 5 years of relevant IT Audit and/or SOX experience.
• Strong hands‑on experience with SOX testing and IT General Controls.
• Experience across areas such as change management, access and security controls, system implementations, computer operations, database security, and network controls.
• Experience working with PCAOB requirements and external auditors.
• Strong understanding of audit frameworks and the ability to independently apply audit methodology.
• Experience conducting walkthroughs, testing controls, identifying gaps, and developing recommendations.
• Comfortable operating in a client‑facing and advisory capacity.
• Big 4 or comparable public accounting/audit firm experience strongly preferred.
• Public company or industry experience is beneficial.
• Insurance industry experience is preferred but not required.
• Exposure to cybersecurity, AI, technology risk, or system implementations is a plus.
• Strong communication, analytical, and stakeholder management skills.
• Candidates must be based in the Eastern Time Zone.
• Candidates must be authorized to work in the U.S. without sponsorship.