Senior IT Risk & Controls Auditor

Relativity; Springfield (IL); Hybrid; USD 178,000 - 266,000; Full time

Job summary

Relativity in Springfield, IL is seeking a Staff IT Auditor to lead second-line IT risk assurance and cross-functional control design within the IIA Three Lines Model. You will perform continuous ITGC testing, maintain the RCM lifecycle, and advise first-line teams on effective control operationalization.

You will translate strategic risk concepts into actionable controls, report risk metrics to leadership, and collaborate with ERM on IT risk appetite while supporting SOX readiness and

Qualifications

• 8+ years of professional experience in IT audit, risk management, or compliance with hands-on ITGC testing.
• Deep knowledge of risk and control frameworks including NIST CSF 2.0, NIST AI RMF, NIST 800-53, ISO/IEC 27001/27018, SOC 2, COSO, COBIT, FedRAMP Moderate/High.
• Certifications such as CISA, CISSP, CGEIT or equivalent.
• Experience designing, building, and monitoring RCMs across multiple teams.
• Strong written and verbal communication for leadership and technical audiences.
• Experience in second-line control testing, deficiency evaluation, and reporting.
• Expertise in IT controls and data integrity and collaboration with internal/external auditors.
• Experience with automated evidence collection or continuous monitoring; liaison to auditors/regulators.

Responsibilities

• Lead second-line IT risk assurance and cross-functional control design.
• Perform continuous ITGC testing and maintain the ROCM lifecycle.
• Define and communicate IT control standards aligned to frameworks.
• Identify risks, provide gap analyses and remediation plans.
• Monitor control performance and optimize control rationalization.
• Report control deficiencies and risk metrics to executives and board.
• Collaborate with ERM to align IT risk appetite with organizational thresholds.
• Represent security in senior forums and provide data-driven risk positions.
• Support SOX readiness and cross-functional audits.

Skills

IT audit

Risk management

GRC

Communication

NIST/ISO frameworks

CISA/CISSP

Team leadership

Programming basics

AI tooling

Education

CISA

CISSP

CGEIT

Job description

Relativity in Springfield, IL is seeking a Staff IT Auditor to lead second-line IT risk assurance and cross-functional control design within the IIA Three Lines Model. You will perform continuous ITGC testing, maintain the RCM lifecycle, and advise first-line teams on effective control operationalization.

You will translate strategic risk concepts into actionable controls, report risk metrics to leadership, and collaborate with ERM on IT risk appetite while supporting SOX readiness and