About The Role

Senior Internal Auditor – Information Technology

Job Summary

The Senior Internal Auditor, Information Technology is responsible for planning, executing, and documenting IT risk-based audits and SOX IT control testing under limited direction. This role assesses risks across systems, applications, infrastructure, cybersecurity, data governance, ERP platforms, cloud services, and emerging technologies.

The position partners with IT, Finance, business process owners, external auditors, and leadership to evaluate control design, test operating effectiveness, identify control gaps, and recommend practical improvements. This role requires strong technical audit knowledge, sound judgment, clear communication, and the ability to translate complex IT risks into actionable business recommendations.

Key Job Responsibilities

Execute IT audits covering IT general controls, application controls, cybersecurity, infrastructure, data integrity, cloud environments, and system governance.
Perform SOX IT control testing, including walkthroughs, control design assessments, operating effectiveness testing, evidence review, deficiency documentation, and remediation follow-up.
Evaluate access governance controls, including user access reviews, privileged access, segregation of duties, role design, access provisioning, access removal, and periodic recertification.
Review change management controls, including system changes, approvals, testing evidence, migration activity, emergency changes, and change monitoring.
Assess IT operations controls, including job monitoring, incident management, backup and recovery, disaster recovery, system availability, and service management processes.
Evaluate application controls and automated controls within ERP systems, financial systems, and other key business applications.
Assess risks related to ERP platforms, cloud services, databases, cybersecurity tools, integrations, and emerging technologies.
Identify IT control gaps, process inefficiencies, risk exposure, and opportunities to strengthen the overall IT control environment.
Prepare clear audit workpapers that support testing performed, evidence reviewed, conclusions reached, findings identified, and recommendations made.
Draft audit findings and reports that clearly explain the issue, risk, root cause, business impact, and recommended corrective action.
Communicate technical audit results to management in a clear, practical, and business-focused way.
Partner with IT and business stakeholders to support timely remediation of deficiencies and sustainable control improvements.
Assist with IT risk assessments, audit planning, test plan development, audit programs, and control scoping activities.
Use data analytics, audit tools, and reporting techniques to identify trends, exceptions, anomalies, and areas of elevated risk.
Monitor changes in IT audit standards, cybersecurity practices, regulatory requirements, SOX expectations, and control frameworks.
Support special projects, system implementations, process improvement initiatives, investigations, and advisory reviews as assigned.

Required Qualifications

Bachelor’s degree in Information Systems, Computer Science, Accounting, Finance, Business Administration, or a related field.
5+ years of experience in IT audit, IT risk, SOX IT compliance, information security, cybersecurity, public accounting, or related experience.
Strong knowledge of IT general controls, SOX IT requirements, application controls, IT risk management, and internal control frameworks.
Experience testing key IT control areas, including access management, change management, IT operations, cybersecurity, data integrity, and system governance.
Working knowledge of COBIT, NIST, ISO, COSO, or other relevant governance, risk, and control frameworks.
Experience reviewing ERP systems, cloud environments, databases, financial applications, or business-critical systems.
Ability to evaluate technical processes, identify control gaps, assess risk severity, and recommend practical remediation steps.
Strong analytical, problem-solving, documentation, and critical thinking skills.
Strong written and verbal communication skills, including the ability to explain technical findings to non-technical stakeholders.
Ability to manage multiple audits, deadlines, stakeholders, and priorities with limited supervision.
High attention to detail with the ability to produce accurate, complete, and well-supported audit documentation.
Ability to build effective working relationships while maintaining independence and objectivity.
Proficiency with Microsoft Office, including Excel, Word, PowerPoint, and Teams.

Preferred qualifications

CISA, CISSP, CIA, CRISC, or other relevant professional certification.
Public company SOX experience.
Big Four or national public accounting experience.
Experience with manufacturing, renewable energy, global operations, or publicly traded companies.
Experience with ERP systems, cloud platforms, identity access management tools, audit management tools, or data analytics platforms.
Experience with SAP, Oracle, Workday, Microsoft Dynamics, ServiceNow, Azure, AWS, SQL, or similar enterprise systems.
Knowledge of cybersecurity controls, data privacy practices, system implementation reviews, third-party risk, and IT compliance requirements.
Experience supporting external auditor requests and management’s SOX certification process.
Ability to use data analytics to improve audit coverage, testing efficiency, issue identification, and reporting quality.

At Array Tech, Inc., we strive to lead with our culture, and believe that our people are a key enabler of our future state. Our total rewards philosophy supports Array’s ability to attract, develop, and retain our employees. We offer competitive compensation, benefits and wellness programs that align with the local markets where we do business.

Array Tech, Inc. offers equal employment opportunity without regard to race, color, gender, age, creed, sex, religion, national origin, disability (physical or mental), marital status, citizenship, ancestry, sexual orientation, gender identity, and gender expression, or any other legally protected status.

#LI-SB1