IT Auditor

KēSTA I.T.•Salt Lake, UT

1d•Hybrid

About The Position

KēSTA I.T. is seeking a motivated, detail-oriented Internal Auditor to join our client's team in a hybrid/in-office role in Salt Lake City, Utah. This position plays a key role in evaluating business process controls, IT general controls, and application controls across the organization. The Internal Auditor will partner with business and technology stakeholders to identify risks, strengthen internal controls, and support the organization's Sarbanes-Oxley (SOX) compliance program.

Requirements

Bachelor's degree in Accounting, Finance, Information Systems, Business Administration, or a related field.
2+ years of experience in internal audit, external audit, IT audit, accounting, risk management, or a related field.
Basic understanding of IT general controls, application controls, and information systems environments.
Understanding of internal control frameworks, including COSO, risk assessment methodologies, and audit practices.
Experience with SOX compliance, control testing, and documentation.
Familiarity with business process auditing, including areas such as financial reporting, inventory, procurement, order-to-cash, human resources, or other operational processes.
Strong analytical, organizational, and communication skills.
Ability to manage multiple priorities and work effectively with stakeholders across business and technology functions.

Nice To Haves

Professional certification or progress toward certification such as CPA, CIA, CISA, or equivalent.
Experience performing both operational/business process audits and IT audit testing.
Familiarity with ERP systems such as Oracle, NetSuite, or similar enterprise applications.
Experience with governance, risk, and compliance (GRC) tools.
Knowledge of data analytics tools such as Alteryx, SQL, Power BI, Tableau, or similar platforms.
Experience working with external auditors and supporting regulatory or compliance-related audits.

Responsibilities

Perform audits of business processes, financial controls, operational activities, and information technology controls.
Assess the design and operating effectiveness of internal controls through walkthroughs, testing, data analysis, and other audit procedures.
Perform testing of IT general controls, including: User access management and privileged access reviews. System change management and software development lifecycle controls. IT operations and system monitoring controls.
Evaluate application controls, automated controls, and system-generated reports within key business applications.
Develop process narratives, flowcharts, risk and control matrices, and audit workpapers in accordance with Internal Audit standards.
Identify control gaps, assess risks, and recommend practical solutions to improve processes and internal controls.
Conduct deficiency evaluations and support management in developing remediation plans.
Perform validation testing to confirm implementation and effectiveness of corrective actions.
Assist with annual risk assessments, SOX compliance activities, audit planning, and continuous monitoring initiatives.
Support external auditors by providing well-organized documentation and audit evidence.
Prepare clear and concise reports communicating audit observations, recommendations, and business impacts to management.