Internal Auditor

Black Box•United States,

About The Position

Blackbox is seeking a detail-oriented IT Internal Auditor to evaluate the design and operating effectiveness of information technology controls across the organization. The role assesses IT general controls, application controls, cybersecurity practices, data governance, and system implementations to ensure alignment with regulatory requirements, industry standards, and internal policies. The successful candidate will work closely with IT, Security, and business stakeholders to identify risks, recommend improvements, and support the organization’s broader risk management and compliance objectives across the year.

Requirements

Bachelor’s degree in information systems, Computer Science, Accounting, or a related field.
4–6 years of experience in IT audit, IT risk, information security, or a related internal audit function.
Solid understanding of IT general controls, application controls, and IT risk frameworks such as COBIT and NIST CSF.
Knowledge of internal audit requirements under ISO 27001, ISO 9001, ISO 20000, ISO 42001, and ISO 14001, including experience supporting certification or surveillance audits against these standards.
Experience auditing technical controls in SAP ECC, S/4HANA, and Fiori environments, including segregation of duties, authorization and role design, basis security, RFC/interface controls, change transport management, and SAP GRC.
Exposure to privacy regulations such as GDPR and CCPA and to data governance practices.
Experience auditing cloud environments (AWS, Azure, or GCP) and enterprise systems such as ERP systems, databases, and networks.
Experience testing controls over cybersecurity tools and platforms, including SIEM, vulnerability management, and endpoint detection and response tools.
Familiarity with auditing AI/ML systems and governance controls, including model risk, data lineage, and bias/explainability; experience using AI-enabled tools for audit testing and analytics.
Strong analytical, written, and verbal communication skills, including the ability to translate technical findings for non-technical stakeholders.
Ability to independently manage multiple audit engagements and meet deadlines.
Mastery of Excel, dashboard creation, task creation, pivot tables, and presentations of audit status and final reports.

Nice To Haves

Experience or exposure to data analytics tools such as SQL, ACL, and Power BI for audit testing.
Familiarity with DevOps/agile environments and continuous auditing techniques.
Prior experience at a Big 4 or public accounting firm, or in a regulated industry such as financial services, healthcare, or technology.
One or more professional certifications such as CISA, CISSP, CRISC, or CIA.

Responsibilities

Plan and execute annual IT internal audits covering infrastructure, applications, cybersecurity, cloud environments, and third-party vendors.
Evaluate IT general controls, including access management, change management, backup and recovery, and physical and environmental security.
Assess IT application controls and data integrity across key business systems, including input, processing, output, and interface controls.
Review cybersecurity posture, including vulnerability management, incident response, and network security controls.
Participate in audits of the system development lifecycle and new technology implementations.
Identify control gaps, document findings, and assess associated business risk.
Prepare clear, well-supported audit workpapers and reports for management and the Audit Committee.
Track remediation of prior audit findings and validate closure.
Stay current on emerging IT risks, regulatory changes, and industry frameworks.
Collaborate with IT, Security, and business unit leaders to strengthen the control environment.