IT Audit & Controls Analyst

Resourcesoft, Inc.
United States
4 days ago

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Experience required
1 year minimum
Working hours
Regular working hours
Job source

Tech stack

Cyber Security Databases Information Technology Audit Network Architecture Smartsuite User Provisioning Software

Job description

  • Execute ITtesting across applications, databases, operating systems, and network infrastructure.
  • Request, evaluate, and validate technical supporting evidence from system and control owners.
  • Document IT control testing procedures, evidence reviews, exceptions, and defensible workpapers.
  • Assess control design and operating effectiveness across logical access and change management domains.
  • Perform technology risk assessments and cybersecurity maturity evaluations against security frameworks.
  • Assist with IT SOX walkthroughs, control testing, and audit request coordination for key systems.
  • Maintain risk documentation trackers, deficiency logs, and control status reports for leadership.

Requirements

  • 1 or more years of experience in IT audit, technology risk, or information security compliance.
  • Proficiency in IT General Controls (ITGC) testing, control design, and operating effectiveness evaluations.
  • Experience with logical access controls, user provisioning, change management, and computer operations.
  • Experience in IT SOX compliance testing, evidence collection, and preparing audit-ready workpapers.
  • Experience with cybersecurity maturity assessments, GRC tools, and information security control frameworks.
  • Experience in control deficiency identification, root-cause risk analysis, and remediation validation.
  • Excellent verbal and written communication skills.

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on www.dice.com

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

4:11 min

Introduction to cloud-native application developer security

Micah Silverman · WWC 2022

3:04 min

Database evolution and the funding behind vector databases

Erik Bamberg · LIVE

59 sec

Proving regulatory compliance to auditors and chief officers

Mike Bursell Mike Bursell · WWC Europe 2026

3:44 min

Current industry adoption and future security initiatives

Alexander Allmendinger · LIVE

4:01 min

Managing application isolation via pluggable database models

Wei Hu Wei Hu · WWC 2022

3:24 min

Evaluating remote software roles and compensation structures

Nacho Iacovino · WWC 2021

Videos

See all

Related articles

See all