Senior IT SOX & Controls Auditor (Remote)

NW Natural; Lake Michigan Beach (MI); Remote; USD 98,000 - 140,000; Full time

Benefits offered by this job

Health insurance

Vacation days

Sick time

Tuition reimbursement

401K match

Employee discounts

Job summary

NW Natural is seeking a Senior IT SOX/Operational Auditor to lead the annual IT SOX audit plan and test critical IT controls and key reports supporting internal controls over financial reporting. The role requires coordinating with the controls office, IT compliance, and external auditors to ensure quality evidence and alignment.

The candidate will also perform IT operational audits, develop risk-based scopes, and document findings.

Qualifications

• Bachelor’s degree in Information Systems, Computer Science, Accounting, or a related field.
• CISA certification is required.
• Public accounting and publicly traded company experience preferred.
• Minimum of five years of IT SOX audit experience.
• Experience developing test work programs for IT SOX controls.

Responsibilities

• Lead the development and execution of the annual IT SOX Audit Plan.
• Execute and report IT SOX testing of IT general controls and automated reports.
• Document SOX testing work thoroughly with high-quality audit evidence.
• Drive stakeholder engagement with business controls, IT compliance, and external auditors.
• Perform IT operational audits and risk-based testing.

Skills

IT SOX auditing

Stakeholder engagement

NIST CSF

COBIT framework

SAP

AuditBoard

Data analytics

Documentation

Project management

Excel

Education

Bachelor’s degree in Information Systems/Computer Science/Accounting

CISA certification

Tools

AuditBoard

Job description

NW Natural is seeking a Senior IT SOX/Operational Auditor to lead the annual IT SOX audit plan and test critical IT controls and key reports supporting internal controls over financial reporting. The role requires coordinating with the controls office, IT compliance, and external auditors to ensure quality evidence and alignment.

The candidate will also perform IT operational audits, develop risk-based scopes, and document findings.