Senior Staff Internal Audit-IT

Synopsys; Mountain View (CA); On-site; USD 120,000 - 190,000; Full time

Benefits offered by this job

Annual bonus

Equity

Health benefits

Job summary

Synopsys is seeking an IT Audit professional with 5+ years of hands-on experience to plan and execute audits across infrastructure, applications, and security controls. You will lead risk assessments and collaborate with IT teams to drive remediation, focusing on SAP/Oracle ERP environments, UNIX/Windows, cloud, and data privacy.

Join a team that values practical risk insights and clear business language; take ownership, communicate findings to executives, and help strengthen governance across

Qualifications

• 5+ years of hands-on IT audit experience including risk assessment and reporting.
• Experience with SAP and Oracle ERP access controls.
• Familiarity with COBIT, NIST or similar frameworks.
• Strong analytical skills to identify gaps in complex IT environments.
• Professional certifications such as CISA, CIA, or CISSP are valued.

Responsibilities

• Plan and execute IT audits across infrastructure, applications, and security controls.
• Lead Risk Assessments informing the annual IT audit plan.
• Develop and execute audits focused on technologies, including SAP and Oracle ERP, UNIX & Windows, cloud, cybersecurity, privacy.
• Test SOX General IT Controls and IT Application Controls.
• Evaluate IT processes and controls against regulatory requirements, internal policies, and frameworks like COBIT and NIST.
• Prepare audit reports and present findings to senior management, translating technical issues into business risk language.

Skills

IT audits

Information Security audits

Risk assessment

Audit reporting

SAP

Oracle ERP

COBIT

NIST

CISA

CIA

CISSP

Education

Bachelor's or Master's degree in Computer Science or related field

Tools

SAP

Oracle ERP

Job description

US Citizenship is required for this role.

We Are

Synopsys is the leader in engineering solutions from silicon to systems, enabling customers to rapidly innovate AI-powered products. We deliver industry-leading silicon design, IP, simulation and analysis solutions, and design services. We partner closely with our customers across a wide range of industries to maximize their R&D capability and productivity, powering innovation today that ignites the ingenuity of tomorrow.

You Are

You have spent years in the details of IT systems, not just reading documentation butdigginginto logs, configurations, and control environments to understand what is really happening versus what someone says is happening. Auditing, for you, is not about checklists. It is about understanding how a systemworks, where the gaps are, and what matters most when things go sideways.

You are comfortable sitting with a database administrator walking through accesscontrols forone hour and then presenting findings to aVP,translating technical risk into business language without losing the substance. When you review an ERP system or a securityprocess, you are not just checking boxes. You are thinking about what could break, what the business depends on, and where the real exposure sits.

Risk frameworks like COBIT and NIST are tools you use, notthe theoryyou studied. You know how to build an audit plan that reflects actual risk, not just what was audited last year. At Synopsys, you will work on systems that matter, with a team that takes this work seriously and expects you to bring a point of view, not just a process.

What You'll Be Doing

• Plan and execute IT audits across infrastructure, applications, and security controls, working directly with system owners and IT teams to assess design and operating effectiveness
• Lead Risk Assessments that inform the annual IT audit plan, identifying where the company's technology exposure sits and what needs attention this year
• Develop and execute audits focused on technologies, includingSAP and Oracle ERP, UNIX & Windows environments, cloud computing, cybersecurity, privacy, and emerging technologies (AI/ML)
• Test SOX General IT Controls and IT Application Controls, including evaluating access controls, change management, segregation of duties, and data integrity controls, documenting findings and working with process owners to drive remediation
• Evaluate IT processes and controls against regulatory requirements, internal policies, and frameworks like COBIT and NIST
• Prepare audit reports and present findings to senior management, translating technical issues into business risk language that drives action
• Collaborate with Information Security, IT Operations, and business teams to ensure audit coverage aligns with the company's evolving risk landscape

The Impact You Will Have

• Reduce the company's exposure to IT and security risk by identifying control gaps before they become incidents
• Strengthen Synopsys' compliance posture with SOX, regulatory requirements, and internal governance standards
• Provide leadership with clear, actionable insights into where IT risk sits and what needs to be addressed
• Improve the quality and reliability of IT controls across ERP, infrastructure, and application environments
• Help shape the IT audit strategy by contributing to risk-based planning and audit methodology development
• Build trust with IT and business teams by conducting audits that are rigorous, fair, and focused on real risk
• Support continuous improvement of IT governance and control frameworks across a global technology company

What You'll Need

• Bachelor's orMaster's degree in Computer Science, Information Science, IT, or a related field
• 5+ years of hands-on experience planning and executing IT audits or Information Security audits, including risk assessment and audit reporting
• Working knowledge of SAP and Oracle ERP systems, particularly around access controls, change management, and application-level controls
• Experience applying risk frameworks such as COBIT, NIST, or similar in audit planning and execution
• Strong analytical skills to assess technology controls, identify gaps, and evaluate risk in complex IT environments
• Experience testing SOX General IT Controls and IT Application Controls is a strong plus
• Professional certifications such as CISA, CIA, or CISSP are highly valued

Who You Are

• You can walk into a technical conversation about database permissions or network segmentation and walk out with a clear picture of what the risk is
• You write audit findings that are specific, fair, and focused on what matters, not boilerplate language that gets ignored
• You are organized enough to manage multiple audits at once and disciplined enough to document your work clearly and completely

• You work well across teams, building credibility with IT professionals and business stakeholders without needing to be the loudest voice in the room
• You stay current on IT risk, security trends, and regulatory changes because you know that what mattered last year may not be the right focus this year

The Team You'll Be Part Of

You will join the Synopsys' IT Audit team, which focuses on ensuring the security, integrity, and compliance of information systems across the company. The team works closely with IT, Information Security, and business units to identify risks, develop audit plans, and implement effective governance policies. This is a team that takes the work seriously and expects auditors to bring both technical depth and business judgment to every engagement.

At Synopsys, we want talented people of every background to feel valued and supported to do their best work. Synopsys considers all applicants for employment without regard to race, color, religion, national origin, gender, sexual orientation, age, military veteran status, or disability.

In addition to the base salary, this role may be eligible for an annual bonus, equity, and other discretionary bonuses. Synopsys offers comprehensive health, wellness, and financial benefits as part of a competitive total rewards package. The actual compensation offered will be based on a number of job-related factors, including location, skills, experience, and education. Your recruiter can share more specific details on the total rewards package upon request. The base salary range for this role is across the U.S.