Job Description
About the job
- We are seeking a highly analytical, detail-oriented, and proactive Internal Auditor, IT to strengthen our internal audit function.
- The successful candidate will be responsible for evaluating the effectiveness of IT risk management, internal controls, governance processes, and regulatory compliance across the organization. This role is critical in safeguarding the integrity, confidentiality, and availability of our financial and operational systems while supporting sustainable growth and strategic objectives.
Key Responsibilities
Audit Execution & Reporting:
- Plan and execute risk-based internal audits across the company's operations, with a focus on technology-specific areas.
- Assess the adequacy and effectiveness of internal controls, operational processes, IT systems, and compliance with laws and regulations (e.g., SOX, GDPR, industry-specific standards).
- Evaluate IT general controls (ITGCs), application controls, cybersecurity frameworks, data privacy practices, and cloud infrastructure (e.g., AWS, Azure).
- Conduct audits of key business processes such as Software Development (SDLC), Revenue Recognition (ASC 606), Research & Development, Procurement, and SaaS operations.
- Document audit workpapers clearly and concisely, ensuring conclusions are well-supported.
- Prepare draft and final audit reports, presenting findings, risks, and practical recommendations to process owners and senior management.
- Track and validate the implementation of management's corrective actions.
Risk Assessment & Advisory:
- Assist in the annual risk assessment and development of the flexible internal audit plan.
- Act as a trusted advisor to management, providing insights on process improvements, risk mitigation, and control optimization.
- Stay abreast of emerging risks in the technology sector, including new regulations, evolving cyber threats, and changes in accounting standards.
Cross-Functional Collaboration & Innovation:
- Collaborate closely with Engineering, IT, Security, Finance, Legal, and Product teams.
- Promote a culture of risk awareness and ethical behavior throughout the organization.
- Contribute to the continuous improvement of the internal audit methodology, including the incorporation of data analytics and automation tools.
Profile / Candidate Requirements
Essential Qualifications
- Education: Bachelor’s degree in accounting, Finance, Information Systems, Computer Science, or a related field.
- Certification: Active or pursuing relevant professional certification (e.g., CIA, CISA, CISSP, or equivalent).
Additional Qualifications
- Experience with data analytics tools (ACL, IDEA, Tableau, Power BI) or audit management software.
- Knowledge of regulations relevant to tech (e.g., GDPR, NDP, PCI-DSS).
- Experience with Agile/Scrum development methodologies.
- Background in a reputable accounting firm with technology clients.
Experience:
- 3-5 years of experience in internal auditing, external auditing, or IT auditing.
- Direct experience in the technology industry or technology related function in other industries is preferred (e.g., software, hardware, internet, telecommunications).
- Proven experience auditing IT systems, cybersecurity controls, and cloud environments.
- Solid understanding of internal control frameworks (COSO) and IT governance frameworks (COBIT, NIST, ISO 27001).
- Experience with SOX compliance is highly desirable.
Skills & Competencies:
- Analytical & Critical Thinking: Ability to analyze complex processes, identify root causes, and assess risk.
- Tech-Savvy: Strong understanding of technology stacks, software development, network infrastructure, and data management.
- Communication: Exceptional written and verbal communication skills. Ability to explain technical issues to non-technical stakeholders.
- Integrity & Objectivity: Unquestionable ethics and professional skepticism.
- Project Management: Ability to manage multiple audits and priorities effectively.