Job Summary
Rubrik is seeking an experienced IT Audit Contractor to support the execution of its Sarbanes-Oxley (SOX) compliance program. This role requires deep hands-on expertise in IT General Controls (ITGCs) and IT
Application Controls (ITACs), as well as IT risk assessment of new systems and tools. The ideal candidate brings a structured, audit-first mindset from a Big 4 or internal audit background, along with the agility to
thrive in a fast-paced, high-growth technology environment.
This role works closely with internal stakeholders and external auditors to assess control design, execute operating effectiveness testing, and support timely remediation of identified issues.
Key Responsibilities
Evaluate AI tools: assess IT risks, recommend scoping, and design ITGCs and ITACs.
Evaluate SailPoint Identity Governance by auditing automated workflows across access provisioning, deprovisioning, and user access reviews, and validate the integrity of data synchronized from source systems.
Perform ITtesting across logical access, change management, computer operations, and the system development lifecycle, ensuring audit-ready work papers for each control.
Design and execute ITAC testing, including input, interface, processing, and output controls, across key financial systems.
Lead or participate in system walkthroughs with IT and business process owners to assess control design adequacy and identify gaps requiring remediation.
Track control deficiencies and open issues; work with control owners to monitor remediation and validate closure with sufficient evidence.
Prepare, organize, and maintain high-quality work papers in AuditBoard that meet internal and external audit standards.
Participate in process improvement initiatives to enhance the efficiency and effectiveness of the SOX program year over year.
Support additional internal audit projects and operational audits as directed by Internal Audit leadership.
Required Qualifications
Bachelor's degree in Information Systems, Computer Science, or a related field.
Minimum of 8 years of IT audit experience at a Big 4 public accounting firm, a major consulting organization, or an internal audit function, with a strong foundation in SOX ITand ITAC testing.
Demonstrated hands-on experience designing and executing ITand ITAC test procedures across a range of technology platforms and financial applications.
Proven experience with key report testing methodology (validating report logic, parameters, completeness, and accuracy) in a SOX context.
Strong written and verbal communication skills, with the ability to clearly articulate issues, risks, and recommendations to technical and non-technical stakeholders.
Highly organized and detail-oriented, with the ability to manage multiple concurrent workstreams and meet deadlines in a dynamic environment.
Strong integrity and discretion in handling confidential information.
Preferred Qualifications
Exposure to high-growth SaaS or technology companies, and the ability to navigate evolving control environments with limited supervision.
Hands-on experience assessing new AI tools and designing ITGCs and ITACs for new systems and tools.
Familiarity with COSO and emerging AI governance frameworks as applied within a SOX program.
Experience with business processes such as quote-to-cash.
Familiarity with AuditBoard or similar GRC platforms for documentation, workflow, and reporting.
Experience creating process and data flow diagrams using Lucidchart or equivalent tools.
CISA, CISSP, or an equivalent professional certification.
