IT Audit Senior Associate - Digital Risk Services

Elliott Davis • Charlotte, NC

1d • Hybrid

About The Position

The IT Audit Senior Associate executes and leads key components of IT audit, technology risk, and assurance engagements. The role works with clients and engagement teams to understand technology environments, identify and assess technology risks, evaluate control design and operating effectiveness, and communicate findings and recommendations. The Senior Associate has hands-on responsibility for engagement planning and execution, including walkthroughs, IT general controls (ITGCs), automated and application controls, key reports, SOC reports, and other technology-dependent controls. The position also supports Associate development through coaching and review while maintaining effective communication with client stakeholders and engagement leadership.

The role includes planning and executing IT audit, technology risk, and assurance engagements; assessing risks and controls; testing controls across applications, infrastructure, and cloud environments; reviewing SOC reports; and supporting technology advisory engagements. The Senior Associate analyzes evidence, documents work and conclusions, identifies deficiencies and improvement opportunities, develops recommendations, and assists with remediation. They also coordinate with clients, manage assigned engagement work to schedules and quality expectations, review Associate work, and provide coaching and feedback.

Requirements

• Bachelor’s degree in Accounting, Accounting Information Systems, Information Systems, Information Technology, Computer Science, Finance, or a related field.
• Minimum of 2 to 3 years of professional experience in IT audit, technology risk, IT assurance, internal audit, public accounting, management consulting, or a related risk and controls discipline.
• Experience evaluating and testing IT General Controls, including logical access, change management, and IT operations controls.
• Experience conducting process and control walkthroughs and evaluating control design, implementation, and operating effectiveness.
• Experience preparing audit workpapers and documenting testing procedures, evidence, findings, and conclusions.
• Working knowledge of internal audit and technology risk principles, methodologies, and professional standards.
• Strong analytical, project management, written communication, and interpersonal skills.
• Strong understanding of technology risk, internal controls, and IT audit concepts.
• Ability to understand complex technology environments and translate technical risks into clear business implications.
• Sound professional judgment and appropriate professional skepticism.
• Ability to manage multiple priorities and meet engagement deadlines.
• Clear and professional written and verbal communication skills.
• Confidence interacting with client personnel and management.
• Ability to identify issues, develop practical recommendations, and communicate findings effectively.
• Attention to detail and commitment to high-quality audit documentation.
• Ability to coach junior professionals and provide constructive feedback.
• Commitment to continuous learning as technologies, risks, regulations, and professional standards evolve.

Nice To Haves

• Master’s degree in Information Systems, Accounting, Cybersecurity, or another relevant discipline.
• Experience in a public accounting or professional services environment.
• Experience supporting SOX 404 compliance engagements, including testing technology controls that support financial reporting.
• Experience testing automated controls, application controls, key reports, interfaces, and other IT-dependent controls.
• Experience evaluating technology controls across enterprise applications, infrastructure, and cloud environments.
• Experience reviewing and evaluating SOC 1 and SOC 2 reports and related third-party technology risks.
• Experience supporting or evaluating system implementations and significant technology or business-process changes.
• Familiarity with AICPA and PCAOB auditing standards, as applicable to assigned engagements.
• Experience providing direction, review, or coaching to junior team members.
• One or more relevant professional certifications, such as CISA, CPA, CIA, CISM, CRISC, CISSP, Certified in Cybersecurity (CC), ISO 27001 Lead Auditor or Lead Implementer, or other relevant technology, cybersecurity, audit, or risk certifications.

Responsibilities

• Plan and execute IT audit, technology risk, and assurance engagements, including ITGCs, internal IT audits, SOX 404 support, SOC 1 and SOC 2 engagements, and other technology risk assessments.
• Understand clients’ business processes, technology environments, systems, infrastructure, and relevant risks and controls.
• Facilitate process and control walkthroughs with client stakeholders and document technology processes and control environments.
• Identify technology risks and controls designed to mitigate them, considering effects on business processes and financial reporting controls where applicable.
• Design and execute procedures to evaluate control design, implementation, and operating effectiveness.
• Test ITGCs across enterprise applications, infrastructure, and cloud environments, including logical access, change management, and IT operations controls.
• Evaluate automated controls, application controls, key reports, interfaces, and other IT-dependent controls.
• Review SOC 1 and SOC 2 reports for third-party service providers, including control objectives, complementary user entity controls, exceptions, and their effects on the client’s control environment.
• Support technology advisory and risk engagements involving system implementations, technology initiatives, and significant process or system changes.
• Analyze audit evidence, identify control deficiencies and process-improvement opportunities, and assess potential impacts.
• Develop practical recommendations to strengthen controls, mitigate risks, improve processes, and enhance operational efficiency.
• Assist with remediation action plans, monitor remediation efforts, and validate resolution of control deficiencies.
• Prepare clear, accurate, and well-supported audit workpapers in accordance with applicable methodology, professional standards, and engagement requirements.
• Review client documentation and audit evidence for accuracy, completeness, and relevance, ensuring conclusions are supported.
• Apply professional skepticism and sound judgment when evaluating evidence, control effectiveness, deficiencies, and audit conclusions.
• Escalate complex or unusual issues to engagement leadership in a timely manner and collaborate to resolve them.
• Apply relevant AICPA, PCAOB, and other applicable professional standards and guidance.
• Prepare and communicate audit procedures, observations, control deficiencies, and recommendations to client stakeholders and engagement leadership.
• Manage assigned engagement responsibilities to established schedules, budgets, milestones, and quality expectations.
• Develop and maintain effective working relationships with client personnel and management.
• Serve as a day-to-day client contact during engagement execution, coordinating requests, walkthroughs, testing, issue resolution, and status updates.
• Communicate engagement progress, emerging risks, issues, and findings to engagement leaders in a timely manner.
• Coordinate and oversee assigned Associate work, review workpapers, and provide timely, constructive feedback.
• Coach and support Associates in developing technical, audit, documentation, and client-service skills.
• Promote a collaborative team environment and deliver on commitments to clients and colleagues.

Benefits

• Generous time away and paid firm holidays, including the week between Christmas and New Year’s.
• Flexible work schedules.
• 16 weeks of paid maternity and adoption leave.
• 8 weeks of paid parental leave.
• 4 weeks of paid caregiver leave once eligible.
• Health and wellness benefits, including wellness coaching and mental health counseling.
• One-on-one professional coaching.
• Leadership and career development programs.
• Access to Beyond, a program with experiences intended to support personal and professional growth.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior