SR IT Auditor

Sterling Construction Company, Inc.; The Woodlands (TX); On-site; USD 110,000 - 140,000; Full time

Job summary

Sterling Construction Company, Inc. is seeking a Senior IT Auditor to lead IT SOX compliance, ITGC testing and risk assessments across a decentralized, public organization.

The role partners with IT, Finance and operations to strengthen controls and support major system changes. The ideal candidate has 5+ years of IT audit/IT risk experience, familiarity with COSO/COBIT/NIST/ISO, and strong communication skills to report findings to IT leadership and senior management.

Qualifications

• Experience in IT SOX, ITGCs and IT risk management.
• Experience performing IT audits, risk assessments and control testing.
• Knowledge of ERP systems, change management, access controls and system implementation.
• Public company or public accounting exposure is preferred.
• Ability to communicate findings clearly to IT and senior leadership.
• Proactive, independent worker with strong problem-solving skills.

Responsibilities

• Execute and support annual IT SOX program and third-party activities.
• Test IT general and application controls, including access and change management.
• Identify control gaps and assist with remediation plans.
• Perform IT risk assessments to support audit planning.
• Plan and execute risk-based IT audits with thorough documentation.
• Evaluate governance and regulatory compliance of technology activities.
• Support system implementations and major system changes from a controls perspective.
• Participate in pre- and post-implementation reviews to address findings.
• Contribute to scaling the IT control framework as the business grows.
• Communicate audit risks and recommendations to IT and senior leadership.
• Coordinate with external auditors and assurance partners as needed.

Skills

IT SOX knowledge

ITGCs

Internal controls

IT risk

Communication skills

Independent work

Education

Bachelor's degree in Accounting, Information Systems, Computer Science or related field

CISA

CIA

CPA

Tools

COSO

COBIT

NIST

ISO

Job description

Sterling Construction Company, Inc.

Location: The Woodlands, TX

Pay Range: N/A

Salary Interval: Salary

Application Instructions

Sterling Infrastructure is seeking an experienced Senior IT Auditor to support IT Audit and SOX activities for a rapidly growing, decentralized, publicly traded organization. Reporting to the Director of Assurance, this role will be responsible for executing and supporting IT SOX compliance, IT audits, risk assessments, and technology control reviews across a complex, project-based environment.

This is a hands-on role that will partner closely with IT, Finance, Operations, and business leaders to evaluate technology risks, strengthen internal controls, support system implementations and major system changes, and help drive continuous improvement across the organization.

Position Description

Essential Duties and Responsibilities

1. Execute and support the annual IT SOX compliance program, including oversight and coordination of third-party IT SOX activities.
2. Perform testing and evaluation of IT General Controls (ITGCs) and application controls, including access management, change management, system operations and other key technology controls.
3. Partner with business and IT control owners to identify control gaps, communicate findings and support appropriate remediation.
4. Perform IT risk assessments to support the development of the annual internal audit plan.
5. Plan and execute risk-based IT audits, including scoping, testing, documentation, reporting and follow-up on remediation activities.
6. Evaluate technology governance and compliance with internal policies, regulatory requirements and applicable control frameworks.
7. Provide audit and controls support for new system implementations, ERP upgrades and major system changes, including evaluating risks, control design, data integrity, access, change management and implementation readiness.
8. Participate in pre-implementation and post-implementation reviews to identify control or risk concerns and work with project teams to address findings.
9. Identify opportunities to strengthen and scale the IT control framework as the organization continues to grow.
10. Clearly communicate audit findings, risks and recommendations to IT leadership, business stakeholders and senior leadership.
11. Coordinate with external auditors and other assurance partners as needed.

Position Requirements

Qualifications

1. Strong knowledge of IT SOX, ITGCs, internal controls and IT risk.
2. 5+ years of IT Audit, IT Risk, IT SOX or IT Compliance experience.
3. Public company and/or public accounting experience preferred.
4. Experience with system implementations, ERP upgrades or major technology changes from an audit or controls perspective.
5. Familiarity with frameworks such as COSO, COBIT, NIST and ISO.
6. Ability to independently execute audits, identify risks and communicate findings and recommendations.
7. Strong communication skills with the ability to work effectively with IT, business and senior leadership.
8. Proactive, solutions-oriented and comfortable working independently in a growing organization.
9. Bachelor's degree in Accounting, Information Systems, Computer Science or related field.
10. CISA, CIA or CPA preferred.

Equal Opportunity Employer

We are an equal opportunity employer: We do not discriminate based on race, color, national origin, religion, creed, sex, sexual orientation, gender identity, disability, age, genetic information, marital status, military status, membership or activity in a local human rights commission, or status with regard to public assistance, or any other characteristic protected by applicable law.

PI286995948