IT Auditor

Supermicro•San Jose, CA

About The Position

Supermicro is seeking an IT Auditor to plan and execute IT and technology-risk audits as an individual contributor within Internal Audit. The role covers IT control testing, data analytics, security compliance, AI governance, third-party risk management (TPRM), and other IT operational audits. The auditor will understand the environment under review, assess risks and controls, define audit scope and objectives, evaluate IT control design and effectiveness, and document work and findings to professional standards. The position assesses alignment with requirements such as SOX, ISO 27001, and NIST; evaluates IT security posture; applies data analytics to audit testing; and reviews AI governance and third-party risk. The auditor presents reports to management, tracks remediation, collaborates with stakeholders across the organization, and stays current on emerging technologies, security threats, and regulatory changes.

Requirements

Minimum bachelor's degree.
Five years of relevant experience in IT and operational internal audit, public accounting (Big 4), Sarbanes-Oxley, risk consulting, or internal control functions such as internal audit, compliance, or fraud mitigation.
Ability to link business strategy to key processes and controls and understand risk implications and IT impacts.
Ability to assess the control design and effectiveness of key systems.
Ability to assess programs and projects, including governance and solution designs.
Ability to understand the IT roadmap and engage with management on future developments.
Understanding of best-practice IT program management requirements.
Demonstrated use of data analytics and data visualization in audit, compliance, or risk testing.
Experience with Power BI or similar business intelligence tools; Power BI is strongly preferred.
Working knowledge of security compliance concepts and frameworks such as NIST, ISO 27001, and SOX ITGC.
Familiarity with TPRM/vendor risk assessment and audit.
Working knowledge of AI governance, responsible AI principles, AI-related risks, and regulatory expectations.
Proficiency in SQL and at least one programming language commonly used in data analytics; Python is preferred.
Experience establishing regular, collaborative engagement with key risk stakeholders to drive risk awareness and transparency.

Nice To Haves

Concentration in Information Security, Information Systems, Computer Science, Risk Management, Business, Finance, or a related field.
Experience using generative AI tools such as Microsoft Copilot, ChatGPT, or similar technologies to improve audit efficiency, analytics, reporting, and knowledge management.
Experience auditing SAP HANA or comparable ERP environments.
CISA, CISSP, CISM, CIA, or comparable certification obtained or in progress.

Responsibilities

Develop and execute risk- and regulation-based IT audit work, including gathering background information, assessing risks and controls, defining scope and objectives, and engaging stakeholders.
Evaluate the design and effectiveness of IT general controls and application controls.
Perform audit tests through walkthroughs, interviews, data analysis, and other applicable procedures.
Apply data analytics to audit scoping, population completeness, exception testing, and repeatable procedures.
Document audit workpapers, findings, and recommendations in accordance with professional standards.
Assess IT systems and processes for compliance with relevant regulations, standards such as SOX, ISO, and NIST, and internal policies.
Evaluate security posture, including identity and access management, data security, network security, cybersecurity, and vulnerability management.
Assess AI governance practices, including inventory awareness, acceptable-use controls, AI-tool data handling, human oversight, and alignment with internal and regulatory expectations.
Perform TPRM audit work, including vendor control assessments, review of independent assurance reports, and evaluation of ongoing monitoring.
Assess risks related to emerging technologies such as cloud computing, big data, and AI.
Identify opportunities to improve IT processes and controls and provide recommendations to management.
Prepare and present concise audit reports to management, highlighting key findings, risks, and recommendations.
Communicate and collaborate with IT professionals, business leaders, Security, Procurement, and external auditors.
Track and follow up on audit recommendations to support timely remediation.
Coordinate and deliver assigned reviews efficiently and on time without compromising quality.
Stay current on emerging technologies, security threats, and regulatory changes.