> Markdown version of [/jobs/ext/3052004-it-audit-professional](https://www.wearedevelopers.com/jobs/ext/3052004-it-audit-professional). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # IT audit professional - **Company:** Legora, Inc. - **Location:** United States - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Artificial Intelligence, Amazon Web Services, Microsoft Azure, Software as a Service, Cloud Computing, Google Docs, Github, Identity and Access Management, Information Technology Audit, Netsuite, Power BI, Salesforce.Com, SQL Databases, Tableau (Software), User Provisioning Software, Google Cloud, IT General Controls (ITGC), Okta, Large Language Models, Data Analytics, Gsuite, GPT, Workday - **Published:** September 24, 2026 - **Apply:** https://startup.jobs/senior-it-auditor-legora-10167674 ## About the Role You're a controls-minded IT audit professional who pairs technical fluency with strong judgment. You're comfortable operating in ambiguity, enjoy owning a program end-to-end, and know how to translate technology risk into a practical testing plan. * 3+ years of experience in IT audit, ITGC testing, or a related IT risk/compliance function * Big 4 or co-source firm experience in IT audit * Demonstrated experience building or significantly enhancing an ITGC testing program or methodology from scratch * Strong understanding of access management, change management, and system operations control concepts * Experience reviewing SOC 1/SOC 2 reports and assessing vendor/subservice organization risk * Strong track record managing external audit and/or co-source relationships * Proficiency with Auditboard, Vanta, NetSuite, Google Docs/Workspace, major LLM providers (e.g., ChatGPT, Claude, Gemini), Salesforce, and Workday * Strong written and verbal communication skills, with the ability to explain technical control concepts to non-technical stakeholders * A high degree of ownership and comfort building process where none exists Nice to Have While not required, we think this role could be an especially strong fit if you've helped build or scale an ITGC program through a period of rapid growth. We'd be excited if you bring: * CISA, CISSP, CIA, or similar certification * Prior experience applying AI or automation tools directly within an IT audit or testing workflow * Experience auditing cloud infrastructure and SaaS environments (e.g., Github, Azure, AWS, GCP, Okta, Google Workspace) * Experience with data analytics or continuous monitoring tools (e.g., SQL, Power BI, Tableau, ACL) * Background in a SOX-compliant or public-company-readiness environment ## Description We're hiring a Senior IT Auditor to own IT General Controls (ITGC) and technology risk across our audit program. You'll assess risk across our core systems and vendors, design and execute testing where formal processes don't yet exist, and be a key point of coordination with external audit and our co-source partner on all IT-related matters. This is a hands-on, build-from-scratch role for someone who wants real ownership over how technology risk is assessed and controlled as the company scales - and who's excited to apply AI and automation to make testing faster and more effective, not just more of the same What You'll Do You'll work closely with the CIO org, Engineering, Security, Finance, external audit, and our co-source partner to build a rigorous, efficient ITGC program from the ground up. More than that, we believe you will thrive by taking ownership of: * Contributing the IT risk assessment and translating it into a prioritized testing plan across access, change management, and operations * Designing new ITGC testing processes, workpaper templates, and documentation frameworks from scratch * Coordinating with external audit and the co-source partner on timelines, deliverables, and open items for IT controls * Leading walkthroughs with system owners and IT stakeholders across key applications and infrastructure * Testing access provisioning/deprovisioning, change management, and system operations controls across in-scope systems * Assessing SOC 1/SOC 2 reports for key vendors and subservice organizations, and evaluating complementary user entity controls (CUECs) * Assessing control deficiencies for severity and root cause, and driving remediation plans to completion with system and process owners * Implementing AI-driven and automated solutions to reduce manual testing effort and improve testing coverage ## Related Videos - [ Evaluating AI models for code comprehension](https://www.wearedevelopers.com/videos/1462-evaluating-ai-models-for-code-comprehension) - [How to govern Vibe Coding for the Enterprise](https://www.wearedevelopers.com/videos/100290-how-to-govern-vibe-coding-for-the-enterprise) - [Speak, Code, Deploy: Transforming Developer Experience with Voice Commands](https://www.wearedevelopers.com/videos/1159-speak-code-deploy-transforming-developer-experience-with-voice-commands) - [GitOps for the people](https://www.wearedevelopers.com/videos/815-gitops-for-the-people) - [Building a Multi-Agent Orchestration Engine That Actually Follows the Rules](https://www.wearedevelopers.com/videos/100159-building-a-multi-agent-orchestration-engine-that-actually-follows-the-rules) - [Streaming AI Responses in Real-Time with SSE in Next.js & NestJS](https://www.wearedevelopers.com/videos/1630-streaming-ai-responses-in-real-time-with-sse-in-next-js-nestjs) ## Related Articles - [Got AI ideas but no money? Here are 10 free ways to level up your AI skills with Google Cloud](https://www.wearedevelopers.com/magazine/600-got-ai-ideas-but-no-money-here-are-10-free-ways-to-level-up-your-ai-skills-with-google-cloud) - [13 AI Tools You Have to Try](https://www.wearedevelopers.com/magazine/219-13-ai-tools-you-have-to-try) - [Dev Digest 121 - AI goes offline](https://www.wearedevelopers.com/magazine/456-dev-digest-121-ai-goes-offline) - [Dev Digest 137 - AI'm not sure about this](https://www.wearedevelopers.com/magazine/485-dev-digest-137-ai-m-not-sure-about-this) - [Dev Digest 150 - The shift to AI generated code, fingerprinting and OKRs vs. doing your job](https://www.wearedevelopers.com/magazine/533-dev-digest-150-the-shift-to-ai-generated-code-fingerprinting-and-okrs-vs-doing-your-job) - [Best Companies to work for in London: Top 25 Companies in 2023](https://www.wearedevelopers.com/magazine/187-best-companies-to-work-for-in-london-top-25-companies-in-2023)