Senior Analyst, IT Internal Audit
Core
Execute and support risk-based internal audits across technology, security, cloud, SaaS, and AI governance environments to evaluate control design and operating effectiveness.
Role type
Senior IC IT Internal Audit Analyst
Builds
Audit engagements, risk assessments, and control testing procedures for IT, security, and AI-enabled business processes
Domain
Technology Risk & Internal Audit (SaaS, Cloud, AI, Cybersecurity)
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
IT general controls, information security audits, cloud and SaaS risk assessment, AI governance and risk management, data analytics for auditing, control testing methodologies, audit documentation and reporting, stakeholder management, project management
Preferred skills
Lead auditor certifications (ISO/IEC 27001, 42001), CISA, CIA, CISSP, CCSP, experience with GRC platforms, AI model risk oversight, automation tools for audit execution
Technologies
ISO/IEC 27001, ISO/IEC 42001, SOC 2, NIST, COBIT, ITIL, COSO, GRC platforms, data visualization tools, AI-enabled audit tools
Responsibilities
Execute risk-based internal audit engagements across technology and security areas; Perform audits of IT general controls including access management, change management, and incident management; Support audits of SaaS platforms, cloud infrastructure, and third-party risk; Evaluate design and operating effectiveness of controls; Leverage data analytics and automation tools for audit planning and testing; Document audit workpapers and draft actionable audit observations; Partner with process owners to validate findings and track remediation; Contribute to continuous improvement initiatives within the Internal Audit function
Seniority
Senior, hands-on IC