IT Audit Analyst

The Internal Audit team partners with management to design and evaluate internal controls over financial reporting and key business processes, providing independent assurance in a dynamic environment.

The IT Audit Analyst will be responsible for assessing and strengthening IT General Controls (ITGCs) and testing key reports (IPE) to ensure controls are effectively designed and operating in line with the evolving risk landscape of a high-growth SaaS organization.

What Youll Do

•       Assess and test ITGCs, automated controls (ITACs), and key reports (IPE) in a SaaS environment, ensuring alignment with SOX and SOC frameworks.
•       Evaluate risks arising from system changes, releases, and SaaS product enhancements, including impact on control design and effectiveness
•       Maintain audit documentation, testing evidence, and control tracking within GRC platforms (FloQast), ensuring data integrity and audit readiness.
•       Assess risks associated with system implementations and work with management to identify / implement controls to address identified risks.
•       Review control descriptions, process documentation and testing strategies for reasonableness and accuracy.
•       Independently manage end-to-end control testing, remediation tracking, and stakeholder follow-ups to ensure timely closure.
•       Review remediation plans for reasonableness.
•       Act as the primary liaison for external auditors, ensuring timely and high-quality evidence delivery and resolution of audit queries.
•       Support and lead special audit, and risk management initiatives, including process improvement, system implementation reviews, and strategic control enhancement projects.

What You Have

• 2-6 years of relevant experience in ITGC audits, Report testing, SOC Compliance audits, IT Audit and Business Controls, IT Risk assessment and any other regulatory / compliance audits
• Experience working with implementing, testing, and validating ITGC controls as well as leading remediation of control gaps
• Strong understanding of ITGC domains: access management, change management, and computer operations
• Experience with control documentation & testing compliance and basic understanding into the SOX Project Management
• Demonstrated understanding of business processes, internal controls, risk management, and related controls Experience with regulatory and compliance audits
• Experience with SaaS applications (e.g., NetSuite, Workday, Zuora etc) and understanding of application controls, integrations, and data flows
• Prior experience in testing IPE, Logical access, Change management and Computer operations controls in various SaaS applications (for example salesforce, mulesoft, Netsuite, etc.)
• Understand dependencies between IT systems and SaaS revenue processes (billing, subscriptions, revenue recognition)
• Manage multiple SOX and IT audit workstreams in a fast-paced SaaS environment, ensuring adherence to timelines and quality standards.
• Excellent communication and stakeholder management skills, with the ability to interact with both technical and non-technical teams
• Demonstrated problem-solving skills and analytical abilities with a focus on developing practical solutions with strong results orientation.
• Identify opportunities to automate manual controls and improve efficiency.
• Ability to quickly adapt to the changes and manage deadline pressure, ambiguity and change effectively.
• Self-motivated and able to work on critical tasks independently and as a member of a team.
• CISA or other relevant certification preferred.
• Comfortable utilizing AI tools and emerging technologies to support audit, and risk, activities.

#LI-RK1