IT Internal Auditor
DeWinter BH ·www.dewintergroup.com
Apply directIT Internal Auditor – SOX & AI Risk
Overview
Support a high-growth SaaS organization as an IT Internal Auditor focused on strengthening its technology control environment during a period of rapid innovation. In this hands-on contract role, you will evaluate SOX compliance, assess IT risks associated with newly implemented AI tools, and design and test effective IT General Controls (ITGCs) and IT Application Controls (ITACs).
Working closely with IT teams, business process owners, internal stakeholders, and external auditors, you will assess control design, execute operating effectiveness testing, identify control gaps, and support remediation efforts. This is an opportunity to apply deep IT audit expertise in a dynamic technology environment where your work will directly support secure, compliant, and audit-ready business operations.
Required Skills
- Eight or more years of IT audit experience within a Big 4 public accounting firm, major consulting organization, or internal audit function.
- Strong hands-on experience with SOX ITGC and ITAC testing.
- Experience designing and executing ITGC and ITAC test procedures across technology platforms and financial applications.
- Knowledge of controls related to:
- Logical access
- Access provisioning and deprovisioning
- User access reviews
- Change management
- Computer operations
- Systems development lifecycle controls
- Experience evaluating IT risks associated with SaaS platforms, cloud environments, and newly implemented technologies.
- Experience assessing automated identity governance workflows and data integrity.
- Experience with key report testing, including validation of report logic, parameters, completeness, and accuracy.
- Ability to evaluate input, interface, processing, and output controls.
- Strong written and verbal communication skills, with the ability to explain risks, issues, and recommendations to technical and non-technical stakeholders.
- Excellent organizational skills and the ability to manage multiple workstreams and deadlines.
- Ability to prepare clear, complete, and audit-ready documentation.
- High level of integrity and discretion when handling confidential information.
Nice-to-Have Skills
- Experience assessing AI agents or AI-enabled tools and designing related ITGCs and ITACs.
- Background working in a high-growth SaaS or technology organization.
- Familiarity with COSO and emerging AI governance frameworks within a SOX environment.
- Experience with financial or business processes such as quote-to-cash, revenue recognition, accounts receivable, or accounts payable.
- Experience supporting operational audits, financial audits, or other internal audit projects.
- Knowledge of AWS, Azure, ERP systems, and enterprise applications.
- Experience creating process and data flow diagrams using Lucidchart, Visio, or comparable tools.
- Experience supporting SOX or internal audit process improvement initiatives.
- Familiarity with AuditBoard or a similar GRC platform.
- CISA, CISSP, CPA, or an equivalent professional certification.
Preferred Education and Experience
- Bachelor’s degree in Information Systems, Computer Science, Accounting, or a related field.
- Eight or more years of progressive experience in IT audit, risk assurance, SOX compliance, or internal audit.
- Experience in a Big 4, consulting, or high-growth technology environment.
- Demonstrated ability to work independently while partnering effectively with technical teams, business stakeholders, and audit leadership.
Other Requirements
- Six-month contract assignment.
- Full-time schedule of approximately 40 hours per week.
- Hybrid work arrangement: three days onsite in Palo Alto and two days remote each week.
- Reliable ability to commute to the Palo Alto worksite.
- Immediate availability is preferred.