> Markdown version of [/jobs/ext/1807866-senior-it-internal-auditor](https://www.wearedevelopers.com/jobs/ext/1807866-senior-it-internal-auditor). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior IT Internal Auditor - **Company:** Sompo International - **Location:** Harrison, NY, United States - **Experience:** Expert - **Salary:** $115,000.0 - $140,000.0 - **Contract:** Internship / Graduate position - **Skills:** Cloud Computing, Cloud Computing Security, Control Objectives for Information and Related Technology (COBIT), Cyber Security, Information Systems, Information Technology Audit, IT Management, Information Systems Security Architecture Professional, Network Security, IT General Controls (ITGC), Information Technology - **Published:** July 18, 2026 - **Apply:** https://career.merrimack.edu/companies/sompo-international/jobs/ ## About the Role Bachelor's degree in; Computer Science, Accounting, Finance, Economics, or related IT Audit subject - required. Numerous years of relevant IT Audit experience from a "Big 4" professional services firm (Deloitte, PwC, KPMG, EY, or similar, such as BDO, Grant Thornton, Forvis Mazars, etc.) - required. Certified Information Systems Auditor Certification (CISA) from the Information Systems Audit and Control Association (ISACA) - required. Base knowledge, skills, and experience in the principles and practices of technology, IT industry trends, IT Governance controls, IT General Controls (including IT Service Management), Cybersecurity controls (including network security), and IT infrastructure controls (including Cloud). Experience in standard Institute of Internal Auditors (IIA) audit methodology (audit planning, fieldwork, and reporting), with an attention to quality to meet methodology requirements with minimal review. Other relevant professional certifications are beneficial, such as the Certified Information Systems Security Professional Certification (CISSP) and/or Certified Internal Auditor Certification (CIA). Working knowledge of IT industry frameworks (including COBIT, NIST, ITIL) and IT Industry standards (such as ISO 27001, the Information Security Standard, and ISO 27017, the Cloud Security Standard, etc.). An understanding of the base requirements of key IT regulations such as the expected IT control requirements of the, EU's Digital Operational Resilience Act (DORA) on cyber resilience, etc. Experience with Team Mate (or similar audit systems) a plus. Salary Range: $115,000 - $140,000 Actual compensation for this role will depend on several factors including the cost of living associated with your work location, your qualifications, skills, competencies, and relevant experience. ## Description This role will work with our US Senior IT Audit Manager, the successful candidate will perform and oversee IT Internal Audits and IT SOX work across North America, the UK and European business lines (part of Sompo International), with opportunities to perform and oversee IT Internal Audits and IT SOX work across South America and the Asia region. The successful candidate will be required to proactively perform and oversee IT Internal audits of IT Governance, IT General Controls, Cybersecurity, and IT Infrastructure, in line with standard third line Institute of Internal Auditors (IIA) audit methodology. Location: This position will be based out of our Purchase, NY office. We strive for collaboration which is why we offer a work environment where our employees thrive and develop long lasting careers. Our business, your impact, our opportunity: What you'll be doing: Performing a variety of third-line IT Internal Audits, completing audit fieldwork testing to assess the design and operating effectiveness of IT processes and related controls, within agreed timelines (with a strong delivery focus). Standard Internal Audit methodology will be followed, populating audit work performed within Team Mate (our Internal Audit system). Clear IT Audit reports will be drafted containing IT Audit Issues with agreed management action plans. Open IT Audit issues will be proactively tracked through to remediation / closure. Performing rolling IT SOX (Sarbanes-Oxley Act) testing the design and operating effectiveness of IT Entity Level Controls (IT ELC's), IT General Controls (ITGCs) and IT Application Controls (ITACs) across key financial applications and supporting tools, within agreed timelines (with a strong delivery focus). Standard Financial Controls / ICoFR (Internal Control over Financial Reporting) methodology will be followed, populating SOX control design and operation within Team Mate (our Internal Audit system). Clear IT control deficiencies will be drafted with agreed management action plans. Open IT deficiencies will be proactively tracked through to remediation / closure. Collaboration with IT External Audit teams (including EY and Mazars) across Sompo International entities While the role will focus on North America and Europe (including UK) IT Internal Audits, and IT SOX work, this role will also assist with IT Internal Audits and IT SOX work across other regions globally, where required ## Related Videos - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Your Manager Doesn’t Come with a User Manual (But You Can Totally Write One)](https://www.wearedevelopers.com/videos/1495-your-manager-doesn-t-come-with-a-user-manual-but-you-can-totally-write-one) - [Green Cloud Computing](https://www.wearedevelopers.com/videos/592-green-cloud-computing) - [Starting business without breaking the bank: Self hosted OSS productivity ecosystem](https://www.wearedevelopers.com/videos/1219-starting-business-without-breaking-the-bank-self-hosted-oss-productivity-ecosystem) - [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large) ## Related Articles - [IT Salaries in Germany](https://www.wearedevelopers.com/magazine/287-it-salaries-in-germany) - [IT Salaries in UK](https://www.wearedevelopers.com/magazine/288-it-salaries-in-uk) - [IT Salaries in Austria](https://www.wearedevelopers.com/magazine/286-it-salaries-in-austria) - [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [10 Highest Paying Jobs in Austria](https://www.wearedevelopers.com/magazine/268-10-highest-paying-jobs-in-austria)