About Us: We are a premier retailer known for our commitment to innovation, quality
and customer service. We are preparing to transition into a publicly-traded company
within the next 6–12 months, and are building a future-ready IT audit function that
emphasizes automation, efficiency, and compliance with SOX and regulatory
requirements.
To support this transformation, we are seeking an IT Compliance Auditor —a tech-
savvy professional who can not only execute audit procedures but also help engineer
automated solutions to streamline evidence gathering and testing. This role is designed
for someone who is hands-on and comfortable navigating technical environments,
leveraging modern tools such as Artificial Intelligence to drive a more efficient audit
process.
Job Summary: As our IT Compliance Auditor, you will be responsible for designing
audit procedures to streamline evidence gathering and executing tests of IT General
Controls (ITGC). You will leverage technical and automated tools to validate
effectiveness of controls, while moving beyond manual checklists. You will work closely
with process owners, IT operations and engineering teams to interpret system data,
identify risks, and implement auditable technical solutions. This role is ideal for a
professional who combines strong audit & compliance fundamentals, with a mind for
designing innovative processes to streamline compliance requirements.
Key Responsibilities
- External Audit Collaboration: Collaborate with external auditors to facilitate
- SOX IT General Controls (ITGC) testing, evidence gathering, and system walkthroughs.
- Tripwire Administration: utilize our File Integrity Management solution to monitor configuration and system changes, used to test controls and maintain the integrity of systems throughout the IT environment.
- Automated ITExecution: automate ITtesting workflows (e.g., develop and execute PowerShell and Python scripts) for evidence collection.
- Remediation Engineering: Partner with technical teams to remediate control gaps identified during SOX audits and implement corrective actions to prevent recurrence.
- Log Analysis: Analyze system logs and event data to validate control performance and identify anomalies.
- Process Improvement: Partner with business teams to identify manual control deficiencies and engineer automated improvements.
- Documentation: Maintain comprehensive documentation for all audit workflows
and scripts, ensuring transparency and repeatability.
- Audit Readiness: Support internal and external audits by utilizing self-service
tools for audit readiness.
- Data Integrity: Ensure the integrity of audit trails and secure storage of audit
evidence.
- Compliance Monitoring: Stay up to date with compliance requirements and
ensure technical controls are aligned with them.
Qualifications:
- Education: Bachelor’s degree in Computer Science, Information Technology, Information Systems, or a related field.
- Experience: 2–5 years of experience in IT audit, GRC, or IT Engineering roles.
- Preferred Experience: Experience with Wrike or similar ticketing/project management tools.
- Technical Aptitude:
o Proficiency with Fortra’s Tripwire Enterprise FIM solution
o Strong working knowledge of PowerShell and Python for audit data analysis and automation.
o Experience analyzing and parsing system logs, event data, and access controls.
o Familiarity with directory services (e.g., Active Directory), logging platforms, and file systems.
- Compliance: Familiarity with regulatory and compliance standards such as SOX, ISO 27001, and NIST.
- Soft Skills:
o Strong documentation and process management skills.
o Ability to work independently and prioritize work across multiple audits and compliance initiatives.
o Excellent collaboration and communication skills, especially when working with engineering and non-technical staff.
Preferred Certifications: One or more of the following is preferred: CISA, CISSP, CIA,
CRISC, CPA (with IT audit experience), CEH, COBIT Foundation, or ITIL
Foundation/Practitioner.
What We Offer
- Competitive salary and comprehensive benefits package.
- A key role in our transition to becoming a publicly-traded company.
- Opportunities to shape audit practices and leverage modern technology.
- A collaborative, forward-thinking environment where your input drives real impact.