IT Internal Auditor

UniFirst•Wilmington, MA

8h•$74,000 - $104,000•Hybrid

About The Position

The IT Internal Auditor supports the execution of the Company's Internal Audit plan, with responsibilities covering Sarbanes-Oxley (SOX) IT General Controls (ITGC) testing, IT operational audits, IT compliance audits, and system development life cycle (SDLC) assessments. This role evaluates the design and operating effectiveness of technology controls, identifies opportunities to strengthen governance and risk management practices, and helps enhance the overall control environment. Working closely with Internal Audit leadership, business stakeholders, technology teams, and external auditors, the IT Internal Auditor participates in all phases of the audit cycle, including planning, risk assessment, fieldwork/testing, reporting, and follow-up activities. The position supports the assessment of risks related to information technology, cybersecurity, system implementations, cloud-based environments, third-party service providers, regulatory compliance, and technology-enabled business processes. The successful candidate will apply analytical and problem-solving skills to assess controls, document test procedures and results, communicate observations and recommendations, and contribute to continuous improvement initiatives within the Internal Audit function. This role offers significant exposure to business and IT operations while providing opportunities for professional growth and development. This will be a hybrid position based out of our corporate offices in Wilmington, MA.

Requirements

1-3 years of experience in IT Audit, Internal Audit, SOX compliance, public accounting, IT risk management, IT compliance, cybersecurity, or a related internal controls function
Foundational knowledge of IT General Controls (ITGCs), including user access management, change management, computer operations, and logical security controls.
Exposure to IT operational audits, IT compliance assessments, system development life cycle (SDLC) processes, application controls, or technology risk management is preferred
Demonstrated commitment to professional development, including pursuit of relevant certifications such as Certified Information Systems Auditor (CISA) or Certified Internal Auditor (CIA)
Experience with Optro (formerly AuditBoard) or other audit management software is a plus
Strong verbal and written communication skills, with the ability to effectively document audit procedures, communicate observations, and interact with stakeholders across all levels of the organization
Strong analytical, critical thinking, and problem-solving skills with a high degree of attention to detail and professional skepticism
Self-motivated and results-oriented, with the ability to manage multiple priorities, meet deadlines, and deliver high-quality work in a fast-paced environment with limited supervision
Collaborative team partner who contributes to a positive and inclusive work environment and demonstrates the ability to build effective working relationships with diverse stakeholders
Proficient with Microsoft Office applications (Excel, PowerPoint, Outlook, Word) and comfortable learning and using technology
Willingness and ability to travel up to 15% as required.
Ability to handle sensitive and confidential information with the highest level of integrity, professionalism, and discretion.

Nice To Haves

Relevant professional certifications, including Certified Information Systems Auditor (CISA), Certified Internal Auditor (CIA), Certified Public Accountant (CPA), or Certified Information Systems Security Professional (CISSP), are preferred or expected to be pursued based on experience level.

Responsibilities

Support the Company’s ongoing compliance with the Sarbanes-Oxley Act (SOX) by participating in scoping, planning, walkthroughs, control testing, issue tracking, status reporting, and coordination with external auditors
Execute SOX IT General Controls (ITGC) testing, including assessments of user access management, change management, computer operations, logical security, and other key technology controls
Assist in evaluating the design and operating effectiveness of IT controls and identifying opportunities to strengthen the Company’s control environment, risk management practices, and operational effectiveness.
Support audits and assessments of technology-related risks, including cybersecurity, cloud computing, third-party service providers, data governance, and other emerging technology risks, as assigned.
Participate in System Development Life Cycle (SDLC) reviews and system implementation assessments to evaluate project governance, change management, testing, security, and overall control effectiveness.
Execute audit procedures in accordance with established audit programs, methodologies, and professional standards, while preparing clear, well-organized, and comprehensive audit workpapers.
Analyze audit results, identify control deficiencies and process improvement opportunities, and assist in developing practical, value-added recommendations
Assist in the preparation of Internal Audit reports, including documenting audit scope, objectives, observations, risk assessments, recommendations, and management action plans
Collaborate with IT and business stakeholders to obtain information, discuss audit results, validate findings, and monitor remediation efforts.
Maintain a working knowledge of Internal Audit methodologies, professional standards, regulatory requirements, and industry best practices.
Exceptional organizational skills and ability to manage time effectively and efficiently to ensure assigned work is completed within established time frames
Contribute to departmental initiatives, training programs, knowledge-sharing activities, and continuous improvement efforts designed to enhance the effectiveness and maturity of the Internal Audit function
Perform other audit-related responsibilities, special projects, and ad hoc reviews as assigned