Senior IT Auditor

Cook Systems•Memphis, TN

4d•Hybrid

About The Position

Cook Systems is seeking an experienced Senior IT Auditor for a contract opportunity with its Internal Audit team. The role requires broad, hands-on IT audit experience and the ability to independently plan and execute risk-based audit activities. The auditor will assess established and unfamiliar processes, identify risks and control gaps, develop appropriate audit procedures, and provide meaningful observations and recommendations. The position is based in Memphis, Tennessee, with a hybrid schedule requiring three onsite days per week.

Requirements

At least 5 years of progressive, hands-on IT audit experience, including risk-based or operational IT auditing beyond routine SOX compliance testing.
Strong knowledge of IT risks, controls, and audit methodologies, including IT general controls.
Demonstrated ability to assess unfamiliar systems, processes, or control environments and develop appropriate audit procedures.
Experience developing risk/control matrices, audit programs, testing documentation, and audit workpapers.
Strong analytical, investigative, critical-thinking, and problem-solving skills.
Ability to execute audit activities and produce clear, well-supported results.
Strong written and verbal communication skills.
Experience using data analytics and relevant tools to support audit activities.

Nice To Haves

Certified Information Systems Auditor (CISA) certification preferred.
CISSP, CIA, CPA, or comparable professional certifications are beneficial.
Experience auditing cybersecurity, IT operations, infrastructure, applications, or emerging technologies.
Experience conducting advisory, operational, or other non-SOX IT audit engagements.

Responsibilities

Independently plan and execute risk-based IT audit procedures, including walkthroughs, control evaluations, and testing.
Assess IT general controls, including logical and privileged access management and change management, as well as other technology-related risks and controls.
Evaluate processes and technologies that may not have established audit programs or predefined testing procedures.
Develop and maintain risk/control matrices, audit programs, testing documentation, and supporting workpapers.
Identify control deficiencies, emerging risks, and opportunities for process or control improvements.
Develop practical, well-supported audit observations and recommendations.
Use data analytics and relevant tools to support audit testing and evaluation.
Communicate audit results, findings, and recommendations clearly and professionally.