Senior IT Auditor || Remote || 6 months || Video

Title: Senior IT Auditor

Location: Remote or Memphis, TN. Memphis residence and onsite attendance are not required.

Duration: 6 months plus applicable extensions; extensions are not guaranteed.

MOI: Video

Schedule: Available during Central Time business hours.

Role and required experience

5+ years of progressive, hands-on IT audit beyond routine SOX testing. Independently own risk-based or operational audits from scope and risk assessment through testing, documentation, and reporting with limited guidance.

• Learn unfamiliar systems, processes, data flows, and connections; design procedures when existing programs are absent or insufficient. Initial work is expected to include a financial reconciliation application post-implementation review; build on existing planning through completion. Prior application experience is not required.
• Assess IT risks, internal controls, ITGCs, logical/privileged access, and change management. Interview auditees, investigate gaps, and exercise independent judgment.
• Produce risk/control matrices, audit programs, test documentation, and defensible workpapers. Use Excel and audit analytics; communicate evidence, findings, business risk, and practical recommendations clearly. Work remotely with regular checkpoints.

A SOX-heavy background can qualify through independent operational audit ownership; information-security experience alone is insufficient. Discuss specific nonconfidential audit examples; written answers and work samples are not mandatory.

Preferred qualifications and framework guidance

CISA; CISSP/CIA/CPA or comparable certifications; Power Query/Optro; Big Four or similar firms; cybersecurity, operations, infrastructure, applications, emerging-technology, advisory, or other non-SOX audits. Frameworks may include COBIT, COSO, NIST CSF, or applicable ISO standards; experience with every framework is not required. PCI audits are external under Information Security; Internal Audit monitors them, so direct PCI delivery is not required.

Candidate skills matrix

Enter hands-on years and last used (MM/YYYY or Current) in every row; use 0 and N/A if none. The resume must support the claims.

Skill or technology

Years of experience

Last used MM/YYYY

Risk-Based IT Audit Planning and Execution

IT Risk Assessment and Control Testing

Audit Documentation and Workpapers

Audit Data Analytics and Excel

Audit Findings and Stakeholder Communication

Rapid Learning of Unfamiliar Systems

Audit Framework Application

Senior Talent Acquisition

E-

STELLENT IT A Nationally Recognized Minority Certified Enterprise