Technology Risk & IT Audit Associate

ED03 Elliott Davis Advisory, LLC; United States; Remote; USD 65,000 - 90,000; Full time

Job summary

Elliott Davis is seeking an IT Audit Associate to support IT audit, technology risk, and assurance engagements. You will work with engagement teams to understand client environments, assess risks, and document controls, including IT General Controls, SOX 404, SOC 1 and SOC 2.

You will gain hands‑on experience with SOC reports, automated and application controls, and other technology‑dependent controls, while developing skills in audit execution and professional standards.

Qualifications

• Bachelor's degree in Accounting, Accounting Information Systems, Information Systems, Information Technology, Computer Science, Finance

Responsibilities

• Assist in the planning and execution of IT audit, technology risk, and assurance engagements, including IT General Controls (ITGCs), SOC 1 and SOC 2 engagements, and other technology risk assessments.
• Test ITGCs across enterprise applications, infrastructure, and cloud environments, including relevant logical access, change management, and IT operations controls.
• Review SOC 1 and SOC 2 reports for third-party service providers and assist in evaluating relevant control objectives, complementary user entity controls, exceptions, and their impact on the client's control environment.
• Prepare clear, accurate, and well‑supported audit workpapers in accordance with applicable methodology, professional standards, and engagement requirements.
• Obtain, organize, and evaluate client documentation and audit evidence for accuracy, completeness, and relevance.

Education

Bachelor's degree in Accounting

Accounting Information Systems

Information Systems

Information Technology

Computer Science

Finance

Job description

Elliott Davis is seeking an IT Audit Associate to support IT audit, technology risk, and assurance engagements. You will work with engagement teams to understand client environments, assess risks, and document controls, including IT General Controls, SOX 404, SOC 1 and SOC 2.

You will gain hands‑on experience with SOC reports, automated and application controls, and other technology‑dependent controls, while developing skills in audit execution and professional standards.