Internal Auditor

CompoSecure • Davidson, NC

18d • $88,000 - $140,800 • Onsite

About The Position

The Internal Auditor identifies, assesses, and evaluates business, financial, operational, and information technology risks across the organization. The role supports the Internal Audit function by executing risk-based audits, SOX compliance testing, and advisory engagements involving business-process and IT controls. The auditor evaluates internal-control effectiveness, identifies process-improvement opportunities, supports risk-management initiatives, and works with business and IT stakeholders to strengthen the control environment.

The Internal Audit department is a centralized corporate function operating under GPGI, Inc., the parent organization of Husky Technologies and its affiliated companies. The position is based at Husky Technologies in Bolton, with responsibilities extending across the broader group of companies and providing exposure to varied operations, financial processes, digital technologies, and emerging risks.

The role includes business-process and SOX controls work, including annual testing of Internal Control over Financial Reporting (ICOFR) and controls across key financial cycles. It also includes IT audit and technology-risk work involving IT general and application controls, systems, cybersecurity, data protection, and technology projects. The position works with business, finance, operations, and IT teams and requires periodic travel to operating locations (10–20%).

The role offers an annual pay range of $88,000 to $140,800, with offers negotiated based on qualifications. It may be eligible for annual or quarterly incentive compensation based on employee performance against defined metrics and company goals. Full-time employees are eligible for comprehensive benefits, including group healthcare, dental, vision, a flexible spending account, group term life insurance, and a 401(k) retirement plan. Benefits eligibility begins on the first day of the month after the hire date.

Requirements

• Bachelor's degree in Accounting, Finance, Information Systems, Business Administration, Risk Management, or a related discipline.
• 3 to 7 years of experience in Internal Audit, Risk Management, SOX Compliance, IT Audit, Public Accounting, or a related field.
• Experience testing both business-process controls and IT controls.
• Strong knowledge of SOX, COSO, risk-assessment methodologies, and internal-control frameworks.
• Experience with ERP environments such as SAP, Oracle, Microsoft Dynamics, or similar systems.
• Experience supporting remediation activities and follow-up testing.
• Strong understanding of internal-control principles and risk-management practices.
• Knowledge of SOX, COSO, ITGC, ITAC, and Information Used in Controls (IUCs).
• Ability to evaluate both manual and automated control environments.
• Excellent analytical, problem-solving, and critical-thinking skills.
• Strong verbal, written, and presentation skills.
• Ability to build relationships and influence stakeholders across business and IT functions.
• Strong documentation and report-writing skills.
• Ability to manage multiple projects and meet deadlines.
• Advanced Microsoft Excel and Office skills.
• Ability to work independently with minimal supervision.

Nice To Haves

• CPA, CIA, CISA, CRISC, equivalent professional certification, or other professional designation preferred.
• Public accounting or consulting experience is considered an asset.
• Experience using Optro/AuditBoard or other audit management software is an asset.

Responsibilities

• Execute risk-based internal audits covering operational, financial, compliance, and technology processes.
• Assist in identifying and assessing enterprise risks and evaluating the adequacy of mitigating controls.
• Support development and execution of the annual internal audit plan.
• Evaluate internal-control effectiveness and compliance with company policies, regulatory requirements, and established frameworks.
• Prepare audit programs, testing methodologies, and working papers in accordance with Internal Audit Standards.
• Document audit findings, assess root causes, and develop practical recommendations for management.
• Prepare audit reports and communicate results to management.
• Monitor management action plans and perform remediation validation testing.
• Conduct special reviews, investigations, and ad hoc risk assessments as required.
• Support fraud risk assessments and evaluation of anti-fraud controls.
• Perform annual SOX testing of Internal Control over Financial Reporting (ICOFR).
• Evaluate business-process controls across Order-to-Cash, Procure-to-Pay, Inventory and Manufacturing, Financial Close and Reporting, Payroll, and Treasury.
• Assess the design and operating effectiveness of manual controls supporting business processes.
• Review process narratives and maintain risk and control matrices and control documentation.
• Ensure controls remain current, effective, auditable, and aligned with organizational objectives.
• Support external audit requirements related to control testing and compliance.
• Test IT General Controls (ITGCs), IT Application Controls (ITACs), and Information Used in Controls (IUCs).
• Audit technology processes including user access management, change management, IT operations, system development and implementation, and cybersecurity and data protection controls.
• Evaluate ERP systems, interfaces, integrations, and automated controls.
• Assess risks associated with new system implementations and business transformation projects.
• Review IT governance, risk management, and control frameworks.
• Support management in identifying and remediating IT control deficiencies.
• Collaborate with internal and external auditors on technology-related audits and compliance requirements.

Benefits

• Competitive compensation.
• Comprehensive benefits program for full-time employees, including group healthcare, dental, vision, flexible spending account, group term life insurance, and a 401(k) retirement plan.
• May be eligible to participate in an annual or quarterly incentive plan, with incentives earned based on employee performance against defined metrics and company goals.
• Benefits eligibility begins on the first day of the month after the hire date.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level