Senior IT SOX Auditor — Controls & Risk Lead

NW Natural; Crystal Bay (NV); Remote; USD 90,000 - 150,000; Full time

Benefits offered by this job

Health insurance benefits

Wellness resources platform

Paid holidays

Flexible work arrangements

Employee Resource Groups

Exercise facility access

Job summary

NW Natural is seeking a Senior IT SOX/Operational Auditor to lead the annual IT SOX Audit Plan and independently manage testing of IT general controls, automated application controls, and key reports. The role supports IT operational audits and reports directly to the Internal Audit team, with strong collaboration across controls and compliance functions.

The successful candidate will have a Bachelor’s in IS/CS/Accounting, a CISA certification, at least five years of IT SOX auditing experience,

Qualifications

• Bachelor’s degree in Information Systems, Computer Science, Accounting, or a related field
• Certification as Certified Information System Auditor (CISA) is required
• Public accounting and publicly traded company experience preferred
• Minimum of five (5) years of experience performing IT SOX audits
• Experience performing baseline and benchmark testing of key reports supporting internal controls over financial reporting
• Demonstrated ability to work independently, showing self-motivation and effective self-management with limited oversight
• Problem-solving skills and the ability to manage effectively through ambiguity
• Excellent organizational, project management, and time management skills, including the ability to multitask and meet deadlines
• Proven ability to document work in accordance with external auditor expectations, with strong attention to detail
• Experience scoping and executing IT operational audits, from planning, risk assessment, and scoping through reporting
• Experience assessing and implementing controls aligned with the NIST Cybersecurity Framework (CSF)
• Experience performing risk and control assessments using NIST framework guidance
• Experience conducting IT risk assessments using COBIT risk guidance and mapping risks to COBIT control objectives
• Collaborative and flexible team-oriented mindset
• Experience with SAP, data analytics tools, and AuditBoard preferred
• Proficiency with Microsoft Office applications, including Excel, PowerPoint, and Word

Responsibilities

• Lead the development and execution of the annual IT SOX Audit Plan
• Execute and report on IT SOX testing, including testing of IT general controls, automated application controls, and key reports
• Plan, lead, perform, and document control walkthroughs to evaluate the design of IT general controls
• Evaluate the operating effectiveness of key IT SOX general controls and automated application controls through testing
• Perform baseline and benchmark testing of key SOX-relevant reports
• Develop detailed test steps and audit procedures for testing new IT general controls, automated application controls, and key reports
• Apply appropriate test procedures to existing IT SOX controls and reports to ensure key control attributes are adequately addressed
• Document SOX testing work thoroughly and accurately, providing high-quality audit evidence to support conclusions and facilitate efficient review
• Execute test work in compliance with external audit expectations to maximize reliance on internal SOX testing
• Drive cross-functional stakeholder engagement to ensure successful execution of, and alignment with, the annual IT SOX testing plan
• SOX deficiencies and process improvement opportunities) in real time with key stakeholders in a professional and constructive manner
• Project manage IT SOX audit activities, ensuring timely execution, achievement of testing deadlines, and regular status reporting to stakeholders
• Support the IT Audit Program Manager and audit team by leading and performing IT operational audits, including:
• Developing risk-based IT audit scopes
• Leading, conducting, and documenting walkthroughs
• Developing, executing, and documenting audit testing procedures
• Drafting audit findings, developing practical recommendations, and proposing remediation actions
• Support internal and external audit activities related to the year-end financial statement audit by delivering required audit documentation and analyses
• Contribute to overall team effectiveness by performing additional responsibilities as assigned in support of departmental objectives and the annual audit plan

Skills

IT SOX auditing

Risk assessment

NIST CSF

COBIT mapping

SAP

AuditBoard

Data analytics

MS Excel

Education

Bachelors in IS/CS/Accounting

CISA certification

Tools

SAP

AuditBoard

Data analytics tools

Job description

NW Natural is seeking a Senior IT SOX/Operational Auditor to lead the annual IT SOX Audit Plan and independently manage testing of IT general controls, automated application controls, and key reports. The role supports IT operational audits and reports directly to the Internal Audit team, with strong collaboration across controls and compliance functions.

The successful candidate will have a Bachelor’s in IS/CS/Accounting, a CISA certification, at least five years of IT SOX auditing experience,