Auditor Jobs

About The Position

Requirements

• 3–5 years of relevant experience in IT audit, information security, or compliance through public accounting or consulting, industry, internal audit, or equivalent experience.
• Bachelor’s degree in Information Systems, Business, Accounting, Engineering, Computer Science, or a relevant field.
• Experience with compliance and risk frameworks such as PCI DSS 4.0, SOX, global privacy regulations including GDPR and PIPL, emerging AI/data laws, SOC 1/2, and NIST CSF 2.0.
• Controls experience across the systems development lifecycle, access management, computer operations, networking, and security.
• Experience assessing security compliance controls such as identity and access management, vulnerability management, incident response, and data protection.
• Ability to understand and test cloud IT controls in modern, often multi-cloud environments.
• Experience interpreting and applying regulatory requirements and translating expectations into practical, well-designed controls.
• Ability to work with Chinese and European regulatory and security requirements.
• Familiarity with both technical stacks, from database to network to cloud, and core business processes such as Order to Cash, Purchase to Payables, and Hire to Retire.
• Ability to work independently and as part of a team, manage concurrent work from varied sources, and operate with limited supervision.
• Experience leading or contributing to process and systems walkthroughs as part of a risk or control gap assessment.
• Strong project management and organizational skills.
• Clear, confident communication skills, including effectiveness in group presentations and one-on-one conversations.

Nice To Haves

• Prior experience at a Big 4 or large regional public accounting firm is strongly preferred.
• Growing awareness of AI governance and model risk, including how organizations assess and control risks introduced by AI/ML systems and generative AI tooling.

Responsibilities

• Identify risks across new and evolving processes and technologies, including SOX, PCI, privacy, security, and AI governance.
• Design control responses proportionate to identified risks and help close control gaps.
• Contribute to the development of broader standards for managing compliance risk.
• Assess and test IT and security controls against relevant compliance frameworks.
• Lead or contribute to process and systems walkthroughs and risk or control gap assessments.
• Test controls across ERP and cloud environments.
• Monitor emerging regulatory and technology trends and translate them into practical control requirements.
• Work independently and collaboratively across concurrent projects from compliance stakeholders, business teams, and finance teams.