IT Audit Senior Associate - Digital Risk Services

Elliott Davis • Nashville, TN

2d • Hybrid

About The Position

The IT Audit Senior Associate executes and leads key components of IT audit, technology risk, and assurance engagements. The role works with clients and engagement teams to understand technology environments, identify and assess technology risks, evaluate control design and operating effectiveness, and communicate findings and recommendations.

The Senior Associate has hands-on responsibility for engagement planning and execution, including walkthroughs, IT general controls (ITGCs), automated and application controls, key reports, SOC reports, and other technology-dependent controls. The role also supports the development of Associates through coaching and review while maintaining effective communication with client stakeholders and engagement leadership.

Requirements

• Bachelor’s degree in Accounting, Accounting Information Systems, Information Systems, Information Technology, Computer Science, Finance, or a related field.
• Minimum of 2 to 3 years of professional experience in IT audit, technology risk, IT assurance, internal audit, public accounting, management consulting, or a related risk and controls discipline.
• Experience evaluating and testing IT General Controls, including logical access, change management, and IT operations controls.
• Experience conducting process and control walkthroughs and evaluating control design, implementation, and operating effectiveness.
• Experience preparing audit workpapers and documenting testing procedures, evidence, findings, and conclusions.
• Working knowledge of internal audit and technology risk principles, methodologies, and professional standards.
• Strong analytical, project management, written communication, and interpersonal skills.
• Strong understanding of technology risk, internal controls, and IT audit concepts.
• Ability to understand complex technology environments and translate technical risks into clear business implications.
• Sound professional judgment and an appropriate level of professional skepticism.
• Strong analytical and problem-solving capabilities.
• Ability to manage multiple priorities and meet engagement deadlines.
• Clear and professional written and verbal communication.
• Confidence interacting with client personnel and management.
• Ability to identify issues, develop practical recommendations, and communicate findings effectively.
• Attention to detail and commitment to high-quality audit documentation.
• Ability to coach junior professionals and provide constructive feedback.
• Commitment to continuous learning as technologies, risks, regulations, and professional standards evolve.

Nice To Haves

• Master’s degree in Information Systems, Accounting, Cybersecurity, or another relevant discipline.
• Experience in a public accounting or professional services environment.
• Experience supporting SOX 404 compliance engagements, including testing technology controls that support financial reporting.
• Experience testing automated controls, application controls, key reports, interfaces, and other IT-dependent controls.
• Experience evaluating technology controls across enterprise applications, infrastructure, and cloud environments.
• Experience reviewing and evaluating SOC 1 and SOC 2 reports and related third-party technology risks.
• Experience supporting or evaluating system implementations and significant technology or business-process changes.
• Familiarity with AICPA and PCAOB auditing standards, as applicable to assigned engagements.
• Experience providing direction, review, or coaching to junior team members.
• One or more relevant certifications, including CISA, CPA, CIA, CISM, CRISC, CISSP, CC, ISO 27001 Lead Auditor or Lead Implementer, or other relevant technology, cybersecurity, audit, or risk certifications.

Responsibilities

• Participate in planning and executing IT audit, technology risk, and assurance engagements, including ITGCs, internal IT audits, SOX 404 support, SOC 1 and SOC 2 engagements, and other technology risk assessments.
• Understand clients’ business processes, technology environments, systems, infrastructure, and relevant technology risks and controls.
• Facilitate process and control walkthroughs with client stakeholders and document technology processes and control environments.
• Identify technology risks and related controls, considering their impact on business processes and financial reporting controls where applicable.
• Design and execute procedures to evaluate the design, implementation, and operating effectiveness of technology controls.
• Test ITGCs across enterprise applications, infrastructure, and cloud environments, including logical access, change management, and IT operations controls.
• Evaluate automated controls, application controls, key reports, interfaces, and other IT-dependent controls.
• Review and assess SOC 1 and SOC 2 reports for third-party service providers, including control objectives, complementary user entity controls, exceptions, and impacts on client control environments.
• Support technology advisory and risk engagements related to system implementations, technology initiatives, and significant process or system changes.
• Analyze audit evidence, identify control deficiencies and process improvement opportunities, and assess the potential impact of issues.
• Develop recommendations to strengthen controls, mitigate risks, improve processes, and enhance operational efficiency.
• Assist with remediation action plans, monitor remediation efforts, and validate resolution of control deficiencies.
• Prepare clear, accurate, and well-supported audit workpapers in accordance with applicable methodology, professional standards, and engagement requirements.
• Review client documentation and audit evidence for accuracy, completeness, relevance, and support for conclusions.
• Apply professional skepticism and sound judgment when evaluating evidence, control effectiveness, deficiencies, and audit conclusions.
• Escalate complex or unusual issues promptly and collaborate with team members, clients, and technical resources to resolve them.
• Apply relevant AICPA, PCAOB, and other applicable professional standards and guidance.
• Communicate audit procedures, observations, control deficiencies, and recommendations to client stakeholders and engagement leadership.
• Manage assigned engagement responsibilities to established schedules, budgets, milestones, and quality expectations.
• Develop and maintain effective working relationships with client personnel and management.
• Serve as a key day-to-day client contact, coordinating requests, walkthroughs, testing, issue resolution, and status updates.
• Communicate engagement progress, emerging risks, issues, and findings to engagement leaders in a timely manner.
• Coordinate and oversee assigned Associate work, review workpapers, and provide timely, constructive feedback.
• Coach and support Associates in developing technical, audit, documentation, and client-service skills.
• Promote a collaborative team environment and deliver on commitments to clients and colleagues.

Benefits

• Generous time away and paid firm holidays, including the week between Christmas and New Year’s.
• Flexible work schedules.
• 16 weeks of paid maternity and adoption leave.
• 8 weeks of paid parental leave.
• 4 weeks of paid caregiver leave once eligible.
• Health and wellness benefits, including wellness coaching and mental health counseling.
• One-on-one professional coaching.
• Leadership and career development programs.
• Access to Beyond, a program with experiences to support personal and professional growth.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior