Business Assurance and Compliance Auditor
Core
Assess and test IT and security controls against compliance frameworks (SOX, PCI, privacy, SOC 1/2, NIST CSF) and identify risks from new technologies including AI/ML systems.
Role type
Senior IC IT audit and compliance auditor
Builds
Control responses and compliance testing across ERP and cloud environments
Domain
Technology, Finance, and Regulatory Compliance
Required skills
IT audit, information security, compliance frameworks (SOX, PCI DSS, GDPR, NIST CSF), ERP and cloud environment testing, AI governance and model risk assessment, access management, vulnerability management, incident response, data protection, regulatory interpretation, cross-functional collaboration
Preferred skills
Big 4 or large regional public accounting firm experience, multi-cloud environment expertise, Chinese and European regulatory knowledge, Order to Cash and Purchase to Payables process understanding
Technologies
ERP systems, cloud environments, AI/ML systems, GenAI tooling, NIST CSF 2.0, PCI DSS 4.0
Responsibilities
Lead or contribute to process and systems walkthroughs for risk and control gap assessments, test controls across ERP and cloud environments, translate emerging regulatory and technology trends into practical control requirements, collaborate with subject matter experts and business partners to shape compliance risk management standards
Seniority
Mid-level, hands-on IC