Senior Internal Auditor (SOX and IT Audit)

What You'll Do10

• Take an audit testing assignment from the first evidence request through to the final documented conclusion.
• Reconcile system populations against supporting records, then test the controls that govern each population.
• Build Excel workbooks that join exports from multiple systems, resolve duplicate identities and apply approval limits and effective dates.
• Write findings memos that cite specific records for every exception you raise.
• Decide whether a test result reflects a genuine control failure or gaps in the evidence provided, and defend that call in writing.
• Log and classify exceptions so each one traces back to the population and sample it came from.
• Review other auditors' tasks for accuracy, evidence sufficiency, expected answers and grading criteria.
• Pressure-test the answer keys and scoring rules attached to each assignment and flag where they diverge from audit standards.
• Verify that workbooks recalculate as inputs change, so results hold up when the underlying data shifts.
• Cover control areas across vendor management and payment approvals, payroll and compensation changes, and user access or termination controls.

Requirements9

• Five or more years of internal audit, SOX or internal IT audit work where you performed the control testing yourself.
• Direct testing experience in at least one of these areas: vendor management and payment approvals, payroll and compensation changes, or user access and termination controls.
• Advanced Excel ability: handling datasets of 10,000 rows or more, joining exports across systems, resolving duplicate identities, and checking effective dates and approval limits.
• Comfort building formula-driven workbooks that update when inputs change.
• Bachelor's degree in Accounting, Finance, Information Systems or a comparable field.
• Bandwidth for 20 to 40 hours per week.
• CIA, CPA or CISA certification preferred.
• Exposure to more than one control area such as vendor and payments, payroll, and user access preferred.
• SOX 404 or ICFR testing at a public company or bank, or in a risk advisory or SOX consulting practice, preferred.

Who Should Apply

Auditors with five or more years of hands-on SOX or IT control testing who can show workbooks and memos they built themselves. If you have tested vendor payments, payroll changes or access controls and can defend your conclusions record by record, this fits.

Salary Insight