SOX IT Auditor

This role is a permanent role within Internal Audit & Controls post-project.

Key Responsibilities:

• Perform detailed testing of IT General Controls (ITGC) and IT Application Controls (ITAC) in accordance with SOX requirements.
• Perform detailed testing and evaluation of controls relevant to SOC reports.
• Execute detailed testing of ITGC in accordance with SOX:Access Management including multi-factor authentication, segregation of duties, provisioning/deprovisioning across diverse identity platforms, and management of privileged access using e.g Cyberark, CommonFate

• Conduct thorough testing of ITACs in transactional systems, such as:Booking platforms (e.g., reservation engines)

• Apply knowledge of auditing cloud-based infrastructure (AWS, GCP, Azure) and SaaS-based platforms (e.g., Salesforce, Oracle Cloud, Workday)

Requirements:

• 3–5 years of IT audit or risk consulting experience with a primary focus on testing ITGC and ITAC in accordance with SOX requirement in high-transaction volume environments
• Knowledge of auditing digital product platforms, microservices architecture, and API-based workflows is highly desirable.
• Proven ability to independently execute all phases of ITGC and ITAC testing.
• Understanding of real-time transactional systems and high-availability environments.
• Familiarity with digital product platforms, microservices architecture, and API-based workflows.
• Experience auditing controls over customer-facing applications, payment integrations, and mobile/web platforms