SR IT Auditor

Sterling Infrastructure, Inc.; The Woodlands (TX); On-site; USD 110,000 - 150,000; Full time

Job summary

Sterling Infrastructure, Inc. seeks a Senior IT Auditor to support IT SOX, ITGCs and risk assessments across a decentralized, growth-oriented organization.

You will partner with IT, Finance and Operations to evaluate technology risks, strengthen internal controls, and assist with system implementations and major changes. Reporting to the Director of Assurance, you will execute risk-based audits, document findings, and guide remediation initiatives while coordinating with external auditors.

Qualifications

• 5+ years of IT Audit, IT Risk, IT SOX or IT Compliance experience.
• Public company and/or public accounting experience preferred.
• Experience with system implementations, ERP upgrades or major technology changes from an audit or controls perspective.
• Familiarity with COSO, COBIT, NIST and ISO.
• Ability to independently execute audits, identify risks and communicate findings and recommendations.

Responsibilities

• Execute and support the annual IT SOX compliance program, including oversight and coordination of third-party IT SOX activities.
• Perform testing and evaluation of IT General Controls (ITGCs) and application controls, including access management, change management, system operations and other key technology controls.
• Partner with business and IT control owners to identify control gaps, communicate findings and support appropriate remediation.
• Perform IT risk assessments to support the development of the annual internal audit plan.
• Plan and execute risk-based IT audits, including scoping, testing, documentation, reporting and follow-up on remediation activities.
• Evaluate technology governance and compliance with internal policies, regulatory requirements and applicable control frameworks.
• Provide audit and controls support for new system implementations, ERP upgrades and major system changes, including evaluating risks, control design, data integrity, access, change management and implementation readiness.
• Participate in pre-implementation and post-implementation reviews to identify control or risk concerns and work with project teams to address findings.
• Identify opportunities to strengthen and scale the IT control framework as the organization continues to grow.
• Clearly communicate audit findings, risks and recommendations to IT leadership, business stakeholders and senior leadership.
• Coordinate with external auditors and other assurance partners as needed.

Skills

IT SOX

ITGCs

Internal controls

Risk assessment

Audit coordination

Communication skills

Independent auditing

Regulatory frameworks

Control design

Software/system changes

Education

Bachelor’s degree in Accounting, Information Systems, Computer Science or related field

CISA, CIA or CPA preferred

Job description

Sterling Infrastructure is seeking an experienced Senior IT Auditor to support IT Audit and SOX activities for a rapidly growing, decentralized, publicly traded organization. Reporting to the Director of Assurance, this role will be responsible for executing and supporting IT SOX compliance, IT audits, risk assessments, and technology control reviews across a complex, project-based environment.

This is a hands-on role that will partner closely with IT, Finance, Operations, and business leaders to evaluate technology risks, strengthen internal controls, support system implementations and major system changes, and help drive continuous improvement across the organization.

Position Description

Essential Duties and Responsibilities

• Execute and support the annual IT SOX compliance program, including oversight and coordination of third-party IT SOX activities.
• Perform testing and evaluation of IT General Controls (ITGCs) and application controls, including access management, change management, system operations and other key technology controls.
• Partner with business and IT control owners to identify control gaps, communicate findings and support appropriate remediation.
• Perform IT risk assessments to support the development of the annual internal audit plan.
• Plan and execute risk-based IT audits, including scoping, testing, documentation, reporting and follow-up on remediation activities.
• Evaluate technology governance and compliance with internal policies, regulatory requirements and applicable control frameworks.
• Provide audit and controls support for new system implementations, ERP upgrades and major system changes, including evaluating risks, control design, data integrity, access, change management and implementation readiness.
• Participate in pre-implementation and post-implementation reviews to identify control or risk concerns and work with project teams to address findings.
• Identify opportunities to strengthen and scale the IT control framework as the organization continues to grow.
• Clearly communicate audit findings, risks and recommendations to IT leadership, business stakeholders and senior leadership.
• Coordinate with external auditors and other assurance partners as needed.

Position Requirements

Qualifications

• Strong knowledge of IT SOX, ITGCs, internal controls and IT risk.
• 5+ years of IT Audit, IT Risk, IT SOX or IT Compliance experience.
• Public company and/or public accounting experience preferred.
• Experience with system implementations, ERP upgrades or major technology changes from an audit or controls perspective.
• Familiarity with frameworks such as COSO, COBIT, NIST and ISO.
• Ability to independently execute audits, identify risks and communicate findings and recommendations.
• Strong communication skills with the ability to work effectively with IT, business and senior leadership.
• Proactive, solutions-oriented and comfortable working independently in a growing organization.
• Bachelor’s degree in Accounting, Information Systems, Computer Science or related field.
• CISA, CIA or CPA preferred.

Equal Opportunity Employer

We are an equal opportunity employer: We do not discriminate based on race, color, national origin, religion, creed, sex, sexual orientation, gender identity, disability, age, genetic information, marital status, military status, membership or activity in a local human rights commission, or status with regard to public assistance, or any other characteristic protected by applicable law.