IT Audit Associate - Digital Risk Services

Elliott Davis • Nashville, TN

2d

About The Position

The IT Audit Associate supports the execution of IT audit, technology risk, and assurance engagements. As part of an engagement team, the Associate helps understand technology environments, identify and assess technology risks, evaluate the design and operating effectiveness of controls, and document audit procedures and conclusions.

The role provides hands-on experience with IT General Controls (ITGCs), automated and application controls, key reports, SOC reports, and other technology-dependent controls. The Associate works directly with client personnel, develops technical and professional skills, and builds a foundation in IT audit, technology risk, and assurance.

Requirements

• Bachelor’s degree in Accounting, Accounting Information Systems, Information Systems, Information Technology, Computer Science, Finance, or a related field.
• 0 to 2 years of professional experience in IT audit, technology risk, IT assurance, internal audit, public accounting, management consulting, cybersecurity, information technology, or a related field.
• Foundational understanding of information technology, internal controls, information systems, or audit and risk concepts through professional experience, internships, or relevant academic coursework.
• Strong analytical, problem-solving, organizational, written communication, and interpersonal skills.
• Ability to manage assigned responsibilities, meet deadlines, and work effectively in a team environment.
• Ability to communicate clearly and professionally in writing and verbally, ask thoughtful questions, and appropriately escalate issues.
• Ability to learn new technologies, systems, methodologies, and concepts quickly.
• Attention to detail and commitment to producing high-quality work.
• Ability to work independently on assigned responsibilities and collaboratively within an engagement team.
• Receptiveness to coaching and constructive feedback, with professionalism and sound judgment when interacting with clients and colleagues.
• Commitment to continuous learning as technologies, risks, regulations, and professional standards evolve.
• Physical ability, with reasonable accommodations where applicable, to remain stationary regularly, use hands repetitively to operate standard office equipment, and talk or hear in person and by telephone.
• Vision abilities that include close, distance, color, and peripheral vision, depth perception, and ability to adjust focus.
• Ability to use written and oral communication skills, read and interpret data and documents, observe and interpret situations, work under deadlines with frequent interruptions, and interact with internal and external customers.

Nice To Haves

• Master’s degree in Information Systems, Accounting, Cybersecurity, or another relevant discipline.
• For candidates completing an undergraduate degree, relevant internships or coursework in IT audit, information systems, cybersecurity, accounting, internal audit, or risk management.
• Internship or professional experience in public accounting, professional services, internal audit, technology risk, cybersecurity, or management consulting.
• Exposure to ITGCs, including logical access, change management, and IT operations.
• Familiarity with SOX 404 compliance and technology controls supporting financial reporting.
• Exposure to automated controls, application controls, key reports, interfaces, or other IT-dependent controls.
• Familiarity with enterprise applications, technology infrastructure, or cloud environments.
• Exposure to SOC 1 and SOC 2 reports or third-party risk assessments.
• Familiarity with AICPA or PCAOB auditing standards or other applicable professional standards.
• Relevant certifications obtained or in progress, including CISA, CPA, CIA, CISM, CRISC, CISSP, CC, ISO 27001 Lead Auditor or Lead Implementer, or other relevant technology, cybersecurity, audit, or risk certifications.

Responsibilities

• Assist in planning and executing IT audit, technology risk, and assurance engagements, including ITGCs, internal IT audits, SOX 404 support, SOC 1 and SOC 2 engagements, and other technology risk assessments.
• Develop an understanding of clients’ business processes, technology environments, systems, infrastructure, and relevant technology risks and controls.
• Participate in process and control walkthroughs with client stakeholders and document technology processes and control environments.
• Assist in identifying technology risks and controls designed to mitigate them, including their impact on business processes and, as applicable, the financial reporting control environment.
• Perform procedures to evaluate the design, implementation, and operating effectiveness of technology controls under senior team members’ guidance.
• Test ITGCs across enterprise applications, infrastructure, and cloud environments, including logical access, change management, and IT operations controls.
• Assist with testing automated and application controls, key reports, interfaces, and other IT-dependent controls.
• Review SOC 1 and SOC 2 reports for third-party service providers and help evaluate control objectives, complementary user entity controls, exceptions, and their impact on clients’ control environments.
• Support technology advisory and risk engagements related to system implementations, technology initiatives, and significant process or system changes.
• Analyze audit evidence and help identify potential control deficiencies, technology risks, and process improvement opportunities.
• Help develop practical recommendations to strengthen controls, mitigate risks, and improve processes.
• Prepare accurate, well-supported audit workpapers in accordance with applicable methodology, professional standards, and engagement requirements.
• Obtain, organize, and evaluate client documentation and audit evidence for accuracy, completeness, and relevance.
• Document walkthroughs, testing procedures, evidence, results, and conclusions clearly and concisely.
• Apply professional skepticism and sound judgment when performing audit procedures.
• Identify exceptions, unusual circumstances, and potential issues and promptly communicate them to senior engagement team members.
• Develop working knowledge of relevant AICPA, PCAOB, and other applicable professional standards and guidance.
• Incorporate review comments and feedback into workpapers and use feedback to improve audit execution and documentation.
• Complete assigned work in accordance with schedules, budgets, milestones, and quality expectations.
• Build effective professional relationships with client personnel and engagement team members.
• Communicate professionally with client contacts when requesting documentation, scheduling walkthroughs, performing testing, and following up on outstanding items.
• Provide timely updates on responsibilities, potential issues, and engagement progress to Senior Associates, Managers, and other engagement leaders.
• Collaborate with team members and contribute to a positive, inclusive, and supportive team environment.
• Take ownership of assigned responsibilities and deliver on commitments to clients and colleagues.
• Seek and apply coaching and feedback to strengthen technical, audit, documentation, project management, and client-service skills.
• Participate in professional development, technical training, and learning opportunities related to emerging technologies, risks, regulations, and professional standards.

Benefits

• Generous time away and paid firm holidays, including the week between Christmas and New Year’s.
• Flexible work schedules.
• 16 weeks of paid maternity and adoption leave.
• 8 weeks of paid parental leave.
• 4 weeks of paid caregiver leave once eligible.
• Health and wellness benefits, including wellness coaching and mental health counseling.
• One-on-one professional coaching.
• Leadership and career development programs.
• Access to Beyond, a program offering experiences for personal and professional growth.

What This Job Offers

• Job Type: Full-time
• Career Level: Entry Level