Senior IT Internal Auditor

Oliver James Group; Virginia (MN); On-site; USD 110,000 - 160,000; Full time

Job summary

Oliver James Group is seeking a Senior IT Internal Auditor to join our Internal Audit function with a 60% SOX and 40% IT audit focus. This role blends hands-on testing with advisory work, partnering with stakeholders across regions.

The ideal candidate has ~5 years in IT Audit/SOX, strong ITGC experience, PCAOB familiarity, and the ability to communicate findings effectively in a client-facing capacity. This is a full-time, on-site opportunity in the United States.

Qualifications

• Approximately 5 years of IT Audit and/or SOX experience.
• Hands-on SOX testing and IT General Controls experience.
• Experience with PCAOB requirements and external auditors.
• Ability to apply audit methodology independently.

Responsibilities

• Execute SOX testing across key IT controls: change management, security controls, system development and operations.
• Support risk-based IT Internal Audit and advisory engagements.
• Conduct walkthroughs and evaluate control design and operating effectiveness.
• Identify gaps and provide practical improvement recommendations.
• Partner with external auditors on SOX and related requirements.
• Advise stakeholders on emerging technology and IT risk areas.

Skills

IT Audit

SOX testing

IT General Controls

PCAOB experience

Stakeholder management

Audit methodology

Cybersecurity awareness

Relationship building

Job description

• This role does not offer sponsorship and requires U.S. work authorization

• This role does not offer sponsorship and requires U.S. work authorization

Job Summary / Introduction

A growing publicly traded organization is seeking a Senior IT Internal Auditor to join its expanding Internal Audit function. This role offers a broad 60% SOX and 40% IT Internal Audit and Advisory focus, providing the opportunity to combine hands-on testing with more strategic advisory work.

The successful candidate will play an important role in strengthening the organization’s IT audit capabilities, partnering with external auditors and business stakeholders, and providing recommendations around emerging technology and control risks.

This is an excellent opportunity for an IT auditor looking to move beyond traditional compliance testing and gain broader exposure to cybersecurity, AI governance, technology implementations, business continuity, and IT risk.

Detailed Job Description

• ExecuteSOX testing across key IT controls, including:
  • Change management
  • Security controls
  • System development and implementation controls
  • Computer operations
  • Database security
  • Network security
• Support risk-based IT Internal Audit and advisory engagements.
• Perform walkthroughs and evaluate the design and operating effectiveness of controls.
• Identify control gaps and provide practical recommendations to improve the overall control environment.
• Partner with external auditors on SOX and PCAOB-related requirements.
• Advise stakeholders on emerging technology and control risks, including AI, cybersecurity, and system implementations.
• Support reviews of new system implementations and post-implementation controls.
• Contribute to business continuity and technology risk assessments.
• Identify opportunities to improve the efficiency and effectiveness of the SOX and internal control framework.
• Build strong relationships with business and technology stakeholders across multiple regions.
• Help develop and mature the organization’s IT Internal Audit capabilities.

Skills & Experience

• Approximately 5 years of relevant IT Audit and/or SOX experience.
• Strong hands-on experience with SOX testing and IT General Controls.
• Experience across areas such as change management, access and security controls, system implementations, computer operations, database security, and network controls.
• Experience working with PCAOB requirements and external auditors.
• Strong understanding of audit frameworks and the ability to independently apply audit methodology.
• Experience conducting walkthroughs, testing controls, identifying gaps, and developing recommendations.
• Comfortable operating in a client-facing and advisory capacity.
• Big 4 or comparable public accounting/audit firm experience strongly preferred.
• Public company or industry experience is beneficial.
• Insurance industry experience is preferred but not required.
• Exposure to cybersecurity, AI, technology risk, or system implementations is a plus.
• Strong communication, analytical, and stakeholder management skills.
• Candidates must be based in the Eastern Time Zone.
• Candidates must be authorized to work in the U.S. without sponsorship.