Senior IT Auditor

EPRI•Charlotte, NC

79d•$110,000 - $120,000•Onsite

About The Position

The Senior IT Auditor evaluates the Institute’s internal controls, processes, policies, and operating mechanisms to ensure they are adequate, effective, and in compliance with regulatory principles, industry standards, and corporate guidelines. This role involves developing audit programs and testing procedures relevant to risk and test objectives. The auditor will audit data of various departments to ensure accuracy and compliance, identify improper accounting or documentation, and recommend improvements. They will also plan, organize, and perform audits of non-R&D vendor contracts, assess internal controls across accounting, operations, IT, and Information Security, and review the reliability and integrity of information. Additionally, the Senior IT Auditor will review the means of safeguarding assets, ascertain if results are consistent with objectives, and draft clear audit reports with value-added recommendations. This position requires monitoring the implementation of audit recommendations, maintaining business relationships while remaining objective, mentoring other staff, and assisting management with the audit plan and annual risk assessment. Other duties as assigned and assistance with internal audit matters and projects are also expected.

Requirements

Bachelor’s degree in Accounting, Finance, Business, Information Systems, Computer Science, Engineering, or a related field.
Minimum of 7 years of related audit experience, including internal audit, external audit, or a combination of both.
Experience leading or supporting technology-focused audit activities, such as cybersecurity and information security assessments, IT General Controls (ITGC) testing, ERP and SAP audits, and technology-enabled business process reviews.
Experience participating in governance, risk, and control reviews related to technology, data, and system-driven processes, including emerging risk areas.
Strong professional judgment, discretion, objectivity, and independence consistent with senior-level internal audit responsibilities.
Advanced analytical, critical-thinking, and problem-solving skills, with the ability to evaluate complex processes, systems, and risks.
Demonstrated capability to assess risks in technology-enabled environments, including information systems, data flows, and information security considerations.
Experience leveraging technology, data, and analytical tools to support audit planning, testing, and reporting.
Strong oral and written communication skills, including the ability to clearly articulate audit findings, risks, and recommendations to both technical and non-technical audiences.
Ability to work autonomously on complex assignments while collaborating effectively with audit team members and business stakeholders.
Commitment to continuous improvement and ongoing professional development to stay current with evolving audit practices, regulatory expectations, and emerging risk areas.
Proficiency with Microsoft Office Suite, ERP systems, and enterprise content management solutions.

Nice To Haves

Professional certification such as Certified Information Systems Auditor (CISA), Certified Internal Auditor (CIA), or Certified Public Accountant (CPA) strongly preferred.
Familiarity with AI-powered platforms for automating repetitive tasks and improving efficiency.

Responsibilities

Evaluates the Institute’s internal controls, processes, policies, and operating mechanisms to ensure they are adequate, effective, and in compliance with regulatory principles, industry standards, and corporate guidelines.
Develops audit programs and testing procedures relevant to risk and test objectives.
Audits data of various departments within the Institute to ensure accuracy and compliance with applicable guidelines and laws; identifies improper accounting or documentation and recommends improvements to policies or procedures.
Plans, organizes, and performs audits of non-R&D vendor contracts to assess compliance with contractual terms and conditions, including cost allowability and rebates.
Assesses the adequacy and effectiveness of systems of internal accounting, operations, IT, and Information Security controls.
Reviews the reliability and integrity of information and the means used to identify, measure, classify, and report such information.
Reviews the means of safeguarding assets and, as appropriate, verifies the existence of such assets.
Reviews operations and programs to ascertain whether results are consistent with established objectives and goals and whether operations or programs are being carried out as planned.
Drafts audit reports that clearly and concisely describe issues identified and value-added recommendations to improve the effectiveness or efficiency of controls and business processes.
Monitors the implementation of audit recommendations to ensure corrective actions are taken and effective; escalates issues to management as necessary.
Maintains sound business and working relationships throughout the Institute while maintaining an objective, independent perspective.
Mentors other staff and acts in a supervisory capacity on large or complex projects.
Assists management in the development of the audit plan, including the annual risk assessment.
Performs other duties as assigned and assists with other internal audit matters and projects.