ITAudit Manager

ITAudit Manager

Location: Onsite, United States
Experience: 6+ years
Travel: Approximately 25%–50%
Start Date: Expected to onboard within the next two weeks

Role Overview

We are seeking an experienced ITAudit Manager with expertise in IT General Controls, SOX compliance, ERP audits, and IT risk management. The successful candidate will lead IT audit engagements, evaluate automated and application controls, test ERP environments, and provide IT risk advisory services.

Key Responsibilities

• Plan and execute IT audits covering ITGCs, SOX, ICFR, application controls, and ERP systems.
• Assess control design and operating effectiveness, identify gaps, and recommend remediation.
• Evaluate automated and configuration controls and prepare clear testing workpapers.
• Perform SOC 1, SOC 2, SSAE 18, CSAE 3416, IT internal audit, and IT controls testing engagements.
• Audit ERP environments, including SAP, Oracle, Microsoft Dynamics, Infor, Epicor, Lawson, or JDE.
• Review SAP security, Segregation of Duties (SoD), role design, and access management controls.
• Provide advisory support in IT risk, governance, cybersecurity, privacy, and system implementations.
• Communicate audit findings and collaborate with stakeholders to track corrective actions.

Required Qualifications

• 6+ years of experience in IT Audit, IT Risk, Internal Audit, or Risk Advisory.
• Strong knowledge of ITGCs, SOX, ICFR, application controls, and IT risk frameworks.
• Experience applying COBIT, ITIL, and ISO 27001/27002 frameworks.
• Hands-on experience auditing one or more ERP systems.
• Experience evaluating automated controls and documenting audit evidence and testing results.
• Experience with SOC reporting, IT internal audits, and IT controls testing.
• Knowledge of SAP security, SoD, role design, and access management.
• Strong communication, documentation, and stakeholder management skills.
• Ability to work onsite in the US and travel approximately 25%–50%.

Preferred Qualifications

• SAP ECC 6.0 Security implementation, support, and role design experience.
• Experience designing standardized SAP Business and Basis roles.
• Certifications such as CISA, CIA, CRISC, CISSP, SAP Security/GRC, or ISO 27001.
• Master’s degree in Information Systems, Computer Science, Business, or a related field.