Senior Associate/Consultant – Internal IT Audit (IT ICFR)

About the role

Responsible for designing, testing, and monitoring IT General Controls (ITGCs) and IT Automated Controls (ITACs) that support the organization’s financial reporting processes. The role works closely with IT, Finance, external auditors, and process owners to ensure controls are properly designed, operating effectively, and documented in line with regulatory and audit standards.

Key responsibilities

• Evaluate and test ITGCs across access management, change management, computer operations, and program development for financial systems such as ERP, sub‑ledgers, and reporting tools.
• Assess IT‑dependent manual and automated application controls, including interfaces, system‑calculated values, and configurable controls supporting key financial processes.
• Perform risk assessments to identify in‑scope IT systems, applications, and infrastructure relevant to ICFR.
• Document control narratives, risk‑control matrices, and process flowcharts; coordinate remediation of control deficiencies.
• Liaise with external auditors, provide evidence, and respond to audit inquiries.
• Monitor changes in the IT environment—system implementations, upgrades, cloud migrations—and evaluate their impact on ICFR.

Required profile

• Bachelor’s degree in Information Systems, Accounting, Finance, Computer Science, or a related field.
• 3–6 years of experience in IT audit, ICFR/SOX compliance, IT risk & controls; Big 4 experience is a plus.
• Strong understanding of the COSO framework and COBIT requirements.
• Experience testing ITGCs such as access controls, change management, backup/recovery, job scheduling, and segregation of duties.

Required skills

• IT General Controls (ITGC) testing
• Access management
• Change management
• Backup and recovery procedures
• Job scheduling
• Segregation of duties (SoD)
• ERP systems (SAP, Oracle, NetSuite, Microsoft Dynamics)
• IT audit tools and GRC platforms
• COSO framework
• COBIT