Sr. IT Auditor

Berkadia•Ambler, PA

11d

About The Position

The Senior IT Auditor leads infrastructure and application audits within Berkadia’s Audit team. The role conducts independent and objective assessments of business processes, systems, and controls to strengthen risk management, operations, security, compliance, and the internal control system. It leads audit planning, scoping, execution, and reporting based on identified risks, and conducts technical audits across business units. The position works with business, IT, finance, and legal partners to provide comprehensive coverage of IT policies and procedures and new system projects. It requires understanding complex business processes and identifying risks related to regulatory compliance, organizational matters, policy, and technology.

Requirements

At least 2 years of experience in IT or Operations internal auditing, risk management, IT compliance, IT project management, information security, software development, or technology.
Ability to interact with technical software development engineers and business leaders, quickly understand new technology concepts, and translate technical risks into business issues.
Ability to prioritize findings and recommendations, facilitate stakeholder agreement on solutions, and ensure risks are mitigated, both independently and as part of a team.
Strong foundation in risk management, including assessments, control design, and enterprise control frameworks.
Excellent written and verbal communication skills.

Nice To Haves

Bachelor’s degree in information systems, computer science, engineering, accounting, finance, math, or a related field.
Familiarity with COSO, COBIT, ISO, and ITIL frameworks.
CPA, CIA, or CISA certification.
Experience with a Big 4 accounting or consulting firm.

Responsibilities

Assist management with developing the annual IT audit plan, including the annual risk assessment.
Develop IT audit programs and testing procedures aligned with risks and test objectives.
Conduct assigned IT audit engagements from beginning to end, completing projects on time in accordance with the annual Audit Plan and Internal Audit methodology.
Manage project activities, including communicating with the technology team, establishing milestones and deadlines, monitoring fieldwork, reporting progress to audit management, and proposing procedural improvements to audit effectiveness and efficiency.
Conduct test procedures, compile audit findings, document and communicate remediation plans, and complete work papers in compliance with established standards.
Obtain and review evidence and ensure audit conclusions are documented and grounded in a complete understanding of the process, circumstances, and risks.
Identify and communicate issues and recommend solutions relevant to the business and its risks.
Conduct and support SOC audits, including SOC 1 and SOC 2, by evaluating control design and operating effectiveness, documenting findings, and coordinating with internal stakeholders and external auditors.
Perform other duties as assigned.