Internal Auditor

About the company

Black Box

Media production · 11 to 50 employees

What you'll do

• Plan and execute IT internal audits covering infrastructure, applications, cybersecurity, cloud environments, and third-party vendors annually.
• Evaluate IT general controls (ITGCs) including access management, change management, backup/recovery, and physical/environmental security
• Assess IT application controls (ITAC) and data integrity across key business systems (ERP, financial systems, customer platforms), including input, processing, output, and interface controls
• Review cybersecurity posture, including vulnerability management, incident response, and network security controls
• Participate in audits of system development lifecycle (SDLC) and new technology implementations
• Identify control gaps, document findings, and assess associated business risk
• Prepare clear, well-supported audit workpapers and reports for management and the Audit Committee
• Track remediation of prior audit findings and validate closure
• Stay current on emerging IT risks, regulatory changes, and industry frameworks (COBIT, NIST, ISO 27001, 9001, 20000)
• Collaborate with IT, Security, and business unit leaders to strengthen the control environment
• Bachelor’s degree in information systems, Computer Science, Accounting, or a related field
• 4-6 years of experience in IT audit, IT risk, information security, or a related internal audit function
• Solid understanding of IT general controls, application controls, and IT risk frameworks (COBIT, NIST CSF)
• Knowledge of internal audit requirements under ISO 27001 (information security management), ISO 9001 (quality management), ISO 20000 (IT service management), ISO 42001 (AI), ISO 14001 (environmental management) including experience supporting certification or surveillance audits against these standards
• Experience auditing technical controls within SAP environments (SAP ECC, S/4HANA, and Fiori), including segregation of duties (SoD), authorization/role design, basis security, RFC/interface controls, change transport management, and SAP GRC
• Exposure to privacy regulations (GDPR, CCPA) and data governance practices
• Experience auditing cloud environments (AWS, Azure, or GCP) and enterprise systems (ERP, databases, networks)
• Experience testing controls over cybersecurity tools and platforms, such as SIEM ( CrowdStrike Falcon Next-Gen), vulnerability management (Tenable/Nessus/Kali/Burp Suite), and endpoint detection & response (CrowdStrike, Microsoft Defender)
• Familiarity with auditing AI/ML systems and governance controls (model risk, data lineage, bias/explainability), and experience using AI-enabled tools for audit testing and analytics
• Strong analytical, written, and verbal communication skills, with the ability to translate technical findings for non-technical stakeholders
• Ability to manage multiple audit engagements independently and meet deadlines
• Mastery in excel sheets dashboard creation , task creation , pivot tables and presentations of Audit status and final reports .
• Experience/exposure with data analytics tools (SQL, ACL, Power BI) for audit testing
• Familiarity with DevOps/agile environments and continuous auditing techniques
• Prior experience at a Big 4 or public accounting firm, or in a regulated industry (financial services, healthcare, technology)
• Any one or more professional certification such as CISA, CISSP, CRISC, or CIA

Key skills

Keywords for your resumePro

The words this employer's screening is likely to look for.