> Markdown version of [/jobs/ext/1985308-it-audit-controls-analyst](https://www.wearedevelopers.com/jobs/ext/1985308-it-audit-controls-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# IT Audit & Controls Analyst

- **Company:** Resourcesoft, Inc.
- **Location:** United States (Remote available)
- **Contract:** Permanent contract
- **Skills:** Cyber Security, Databases, Information Technology Audit, Network Architecture, Smartsuite, User Provisioning Software
- **Published:** August 8, 2026
- **Apply:** https://www.dice.com/job-detail/4ae185ce-503b-403e-bad4-d0b81cd1d443

## About the Role

* 1 or more years of experience in IT audit, technology risk, or information security compliance.
 * Proficiency in IT General Controls (ITGC) testing, control design, and operating effectiveness evaluations.
 * Experience with logical access controls, user provisioning, change management, and computer operations.
 * Experience in IT SOX compliance testing, evidence collection, and preparing audit-ready workpapers.
 * Experience with cybersecurity maturity assessments, GRC tools, and information security control frameworks.
 * Experience in control deficiency identification, root-cause risk analysis, and remediation validation.
 * Excellent verbal and written communication skills.

## Description

* Execute ITtesting across applications, databases, operating systems, and network infrastructure.
 * Request, evaluate, and validate technical supporting evidence from system and control owners.
 * Document IT control testing procedures, evidence reviews, exceptions, and defensible workpapers.
 * Assess control design and operating effectiveness across logical access and change management domains.
 * Perform technology risk assessments and cybersecurity maturity evaluations against security frameworks.
 * Assist with IT SOX walkthroughs, control testing, and audit request coordination for key systems.
 * Maintain risk documentation trackers, deficiency logs, and control status reports for leadership.


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Kubernetes and Microservices with Multi-Model Databases](https://www.wearedevelopers.com/videos/382-kubernetes-and-microservices-with-multi-model-databases)
- [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure)
- [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large)
- [Fault Tolerance and Consistency at Scale: Harnessing the Power of Distributed SQL Databases](https://www.wearedevelopers.com/videos/1146-fault-tolerance-and-consistency-at-scale-harnessing-the-power-of-distributed-sql-databases)

## Related Articles

- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [The 8 Best Code Testing Tools](https://www.wearedevelopers.com/magazine/402-the-8-best-code-testing-tools)
- [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)