Senior IT Auditor

Role Overview

About ACS

Audit and Risk Responsibilities

• Assist the Senior Audit Manager with an integrated IT audit function through IT General Controls.
• Execute global information security risk management activities and conduct operational audits and SOX testing in the APAC region.
• Create entity-level risk assessments and evaluate process and cybersecurity risks across business units.
• Schedule audits and projects based on resources, business needs, and organizational priorities.
• Design and execute risk-based audit procedures and work plans.

IT Audit Execution

• Collaborate with local staff and management to understand business operations.
• Recommend directions related to security incident investigation, risk analysis, and compliance measures.
• Assess security controls for global information and technology systems and conduct detailed audits of IT systems and infrastructure.
• Maintain workpaper documentation supporting audit conclusions and evaluate compliance with regulatory guidance and internal policies.

Analysis and Reporting

• Prepare and present audit reports describing risks, process weaknesses, and mitigation recommendations.
• Evaluate action plans, manage the IT audit findings log, and monitor corrective actions.
• Develop project plans and work programs, evaluate system controls, document results, and communicate findings to management.
• Conduct penetration and vulnerability testing, manage security measures, troubleshoot security and network issues, and respond to breaches.
• Build partnerships with management to sustain efficient IT internal controls.

Qualifications

• Bachelor's degree in Information Systems, Computer Science, Information Technology, or a related discipline.
• Three to five years of relevant IT audit, IT risk, or technology controls experience.
• Hands-on experience with IT General Controls and IT SOX compliance testing.
• Strong knowledge of information security risks, controls, and compliance practices.
• Experience auditing applications, systems, networks, infrastructure, hardware, software, or data centers.
• Ability to assess control gaps, identify root causes, and recommend practical corrective actions.
• Strong audit documentation, report-writing, analytical, and stakeholder-management skills.
• Excellent written and verbal communication skills in English.
• Ability to manage multiple priorities and work independently in a fast-paced environment.
• Experience presenting audit findings and recommendations to senior management.
• Willingness to travel as required.

Preferred Qualifications

• Current or prior professional experience with a Big Four firm is highly preferred.
• CISA, CISSP, or a comparable professional certification is preferred.

Compensation

• The base salary range is $90,000-$115,000 annually.
• The posting also states that wage depends on experience and that compensation considers location, industry experience, qualifications, skills, and education.

Benefits and Culture

• The company describes benefits including medical, dental, vision, traveler's insurance, a health care spending account, retirement or pension plans, incentives, paid leave, and disability coverage.
• The role offers global project exposure, training and development, education allowances, autonomy, and a collaborative culture.