Senior Internal Auditor

STERIS Corporation•Mentor, OH

4d•$75,000 - $90,000

About The Position

The Senior IT Internal Auditor owns and executes risk-based IT and cybersecurity audits in accordance with Internal Audit methodology, including planning, scoping, testing, and reporting. The role leads audit activities end to end, evaluates risks, develops audit approaches, and delivers actionable recommendations to management. The position supports the Company’s Sarbanes-Oxley (SOX) compliance program, evaluating the design and operating effectiveness of IT general controls (ITGCs), application controls, cybersecurity controls, and system-related processes across key business systems. It also supports other Internal Audit work, including inventory observations and financial or operational audits as needed. The Senior IT Internal Auditor works closely with IT, Information Security, Finance, Compliance, business stakeholders, and external auditors to strengthen controls and drive continuous improvement. The position includes domestic and limited international travel for inventory observations and related audits.

Requirements

Bachelor’s degree in Accounting, Finance, Information Systems, or a related field.
CISA, CIA, CPA, or comparable certification required.
At least 5 years of relevant internal or external audit experience, including at least 3 years in IT audit.
Experience with SOX compliance, including ITGC and application control testing and reviews.
Understanding of cybersecurity frameworks and concepts.
Knowledge of ERP systems such as Oracle or SAP and related business processes.
Strong analytical, organizational, and problem-solving skills.
Effective written and verbal communication skills.
Ability to manage multiple priorities and meet deadlines.
Willingness to travel approximately 10–20%, including participation in inventory observations and related audits.
Experience working with external auditors.
Strong interpersonal skills and ability to work with people at all levels and facilitate corrective action.
Self-starter with organizational, project management, time management, and problem-solving skills.
Ability to balance multiple high-priority responsibilities and address difficult issues appropriately and promptly with stakeholders.

Nice To Haves

Experience auditing cybersecurity domains such as identity and access management, network security, cloud security, or incident response.
Experience with automated controls, system implementations, and data analytics tools.
Exposure to manufacturing and/or distribution environments.
Residence in the Eastern time zone is preferred.

Responsibilities

Lead and support SOX IT compliance activities, including walkthroughs, control testing and reviews, and documentation reviews of ITGCs and automated/application controls.
Assess the design and operating effectiveness of ITGCs, including user access, change management, and IT operations controls across key systems and processes.
Perform risk assessments and support audit planning by identifying key risks, developing audit scope and objectives, and assisting with risk-based audit programs.
Execute IT and cybersecurity audits covering areas such as identity and access management, change management, IT operations, vulnerability management, incident response, and data protection.
Evaluate risks and controls related to system implementations, enhancements, and emerging technologies, including cloud and cybersecurity initiatives.
Identify, assess, and communicate control deficiencies; conduct root cause analysis; develop actionable recommendations; and support and monitor remediation.
Perform audit fieldwork and prepare and review workpapers for completeness, accuracy, and compliance with Internal Audit standards.
Liaise with IT, Information Security, business stakeholders, and external auditors to align on audit scope, testing, and timelines.
Provide day-to-day guidance, oversight, and project management support for audit engagements, including reviewing work, coordinating timelines and deliverables, coaching on audit methodology, and supporting development.
Support financial and operational audits by providing IT expertise and assisting with planning, testing, reviews, and reporting as needed.
Lead and participate in inventory observations at manufacturing and distribution locations, including required domestic and limited international travel.