Systems Auditor

We are seeking a detail-oriented Systems Auditor to join our Internal Audit team. This role will be responsible for conducting audits across the organization’s technology systems, applications, user access, and internal controls.

The ideal candidate is comfortable working with both business and technical teams and has hands-on experience reviewing user roles, system access, permissions, segregation of duties, system controls, and IT processes. The Systems Auditor will identify control weaknesses, assess risks, document findings, and work with system owners to develop practical remediation plans.

Key Responsibilities

• Plan and execute internal audits of information systems, applications, and technology processes.
• Review user accounts, roles, permissions, privileged access, and access provisioning/deprovisioning.
• Evaluate access controls and identify inappropriate or excessive system access.
• Test segregation of duties (SoD) and user-role configurations.
• Assess system configurations and controls for effectiveness and compliance.
• Perform audits of ERP, financial, HR, operational, cloud, and other enterprise applications.
• Review audit logs, access reports, system configurations, and other supporting evidence.
• Identify control gaps, assess risk, and prepare clear audit findings and recommendations.
• Work with system owners, IT, Security, HR, and business stakeholders to validate findings and track remediation.
• Prepare audit workpapers and maintain appropriate documentation in accordance with internal audit standards.
• Follow up on previously identified findings and verify corrective actions.
• Assist with risk assessments and development of the annual internal audit plan.
• Communicate audit results to management in a clear, professional manner.

Qualifications

• Bachelor’s degree in Information Systems, Computer Science, Accounting, Finance, Cybersecurity, or a related field.
• Approximately 3–6 years of experience in IT audit, systems audit, internal audit, information security, compliance, or a related discipline.
• Practical experience auditing user access, roles, permissions, and system controls.
• Understanding of IT general controls and internal control frameworks.
• Experience reviewing access management and segregation-of-duties controls.
• Ability to analyze system reports, audit evidence, and technical documentation.
• Strong understanding of risk assessment and audit testing methodologies.
• Excellent written and verbal communication skills.
• Strong attention to detail and ability to independently manage multiple audits and deadlines.

Preferred Qualifications

• CIA, CISA, CRISC, CISSP, or similar professional certification.
• Experience with ERP and enterprise applications such as SAP, Oracle, Microsoft Dynamics, Workday, or similar systems.
• Experience with identity and access management (IAM) platforms.
• Familiarity with frameworks such as COSO, COBIT, NIST, and SOX.
• Experience with audit or GRC platforms.
• Knowledge of SQL, reporting tools, or data analytics is a plus.