Senior Analyst, IT Internal Audit

Genesys

14h•Remote

About The Position

Be the one building AI-powered experiences where they matter most. At Genesys, we help organizations create better customer experiences through AI-powered experience orchestration. Our platform connects people, systems, data and AI to help organizations deliver more personalized service, improve operational efficiency and build stronger customer relationships. Help build, support and operate technology used by more than 8,000 organizations in over 100 countries – moving AI from possibility to production in real-world enterprise environments every day. Reporting to the Senior Manager, Internal Audit the Senior Analyst, Internal Audit will be responsible for executing and supporting risk-based internal audits across Genesys, with a strong focus on IT general controls, information security, cloud and SaaS environments, AI governance, data analytics, and technology-enabled business processes . This role is ideal for a hands-on audit professional with 5 or more years of experience in IT internal audits, technology risk, information security audits, or compliance reviews. The candidate should bring strong knowledge of internal audit practices, IT control frameworks, and emerging technology risks, including risks associated with artificial intelligence, automation, cloud platforms, cybersecurity, and data governance. The Senior Analyst will support the planning, execution, documentation, and reporting of internal audit engagements, while also contributing to the continued maturity of the Internal Audit function through data-driven auditing, automation, and practical risk insights. This position is suited for an experienced Senior Analyst who enjoys hands-on involvement in a fast-paced technology company delivering SaaS, cloud, digital, and AI-powered solutions to global customers.

Requirements

Bachelor’s degree in information systems, Computer Science, Engineering, Accounting, Finance, Business Administration, or a related field.
5 or more years of experience in IT internal audit, technology risk, information security audit, internal controls, compliance, risk advisory, or external audit.
Experience performing IT audits in SaaS, cloud, technology, cybersecurity, or product-driven environments.
Working knowledge of IT general controls, application controls, cybersecurity controls, cloud controls, identity and access management, change management, incident management, and data governance.
Experience with internal audit methodology, risk assessment, control design evaluation, operating effectiveness testing, audit documentation, and issue reporting.
Understanding of AI governance, responsible AI principles, AI risk management, model oversight, data quality, security, privacy, and regulatory considerations related to AI adoption.
Familiarity with frameworks and standards such as ISO/IEC 27001, ISO/IEC 42001, SOC 2, NIST Cybersecurity Framework, COBIT, ITIL, COSO, and cloud security control frameworks.
Ability to analyze complex technology and business processes, identify risks and control gaps, and recommend practical improvements.
Strong written and verbal communication skills, with the ability to clearly articulate audit findings, risks, and recommendations.
Strong project management and organizational skills, with the ability to manage multiple audit tasks and deadlines.
High attention to detail, intellectual curiosity, professional skepticism, and ability to work independently in a dynamic, fast-paced environment.
Ability to collaborate effectively with global teams and stakeholders across different functions and time zones.

Nice To Haves

Relevant professional certification preferred, such as: ISO/IEC 27001 Lead Auditor ISO/IEC 42001 Lead Auditor Certified Information Systems Auditor, CISA Certified Internal Auditor, CIA Certified Information Systems Security Professional, CISSP Certified Cloud Security Professional, CCSP
At least one lead auditor certification, such as ISO/IEC 27001 Lead Auditor or ISO/IEC 42001 Lead Auditor, is preferred.
Experience using data analytics, automation, or AI-enabled tools to improve audit execution, control testing, and reporting is preferred.
Prior Big4 experience or experience in a global technology, SaaS, cloud, cybersecurity, or product engineering environment.
Experience supporting audits of AI-enabled processes, AI governance programs, machine learning platforms, or automated decision-making systems.
Experience with audit management tools, GRC platforms, data visualization tools, or analytics tools.
Practical exposure to SOX ITGCs, SOC 2 audits, ISO audits, cybersecurity assessments, vendor risk reviews, or cloud control assessments.
Experience working with cross-functional teams across IT, Security, Engineering, Product, Legal, Privacy, Compliance, and Finance.

Responsibilities

Execute and support risk-based internal audit engagements across technology, security, operational, compliance, and business process areas.
Assist in defining audit objectives, scope, control testing procedures, sampling methodology, and documentation requirements.
Perform audits of IT general controls, including access management, change management, logical security, incident management, backup and recovery, system development lifecycle, and IT operations.
Support audits related to SaaS platforms, cloud infrastructure, cybersecurity, data privacy, third-party risk management, and technology-enabled business processes.
Evaluate the design and operating effectiveness of controls across IT, security, compliance, and operational areas.
Support audits and advisory reviews related to artificial intelligence, including AI governance, responsible AI practices, model risk considerations, data quality, access controls, transparency, monitoring, and compliance with internal AI policies.
Assist in assessing controls aligned with relevant frameworks and standards such as ISO/IEC 27001, ISO/IEC 42001, SOC 2, NIST, COBIT, ITIL, and other applicable technology risk frameworks.
Leverage data analytics and automation tools to support audit planning, risk identification, control testing, exception analysis, and continuous monitoring.
Use AI-enabled tools, where appropriate, to improve internal audit efficiency, including audit planning support, control mapping, document review, testing analysis, issue tracking, and reporting.
Document audit workpapers clearly and accurately, ensuring sufficient evidence is retained to support audit conclusions.
Identify control gaps, process inefficiencies, risk exposures, and opportunities for improvement.
Draft clear, practical, and business-oriented audit observations, including root cause, risk impact, and actionable recommendations.
Partner with process owners and management to validate audit findings, agree on remediation actions, and track issue closure.
Monitor and follow up on open audit issues to ensure timely and sustainable remediation.
Maintain audit databases, issue trackers, and engagement status updates to support timely completion of audit activities.
Build effective working relationships with stakeholders across IT, Information Security, Compliance, Legal, Finance, Operations, Product, Engineering, and other business teams.
Support special projects, management requests, and advisory reviews as directed by Internal Audit leadership.
Contribute to continuous improvement initiatives within Internal Audit, including methodology enhancements, audit automation, data analytics, AI use cases, and knowledge-sharing practices.