IT Auditor

Supermicro is seeking a skilled IT Auditor to plan and execute IT and technology-risk audits as an individual contributor within Internal Audit. In this role, you will focus on IT control testing, data analytics, security compliance, AI governance, third-party risk management (TPRM), and other IT operational audits. You will obtain background on the environment under review, perform risk and control assessments, define scope and objectives, evaluate the design and effectiveness of IT controls, and document findings to professional standards. You will assess alignment with requirements such as SOX, ISO 27001, and NIST, evaluate security posture, apply data analytics to testing, and review AI governance and third-party risk. You will present concise reports to management, track remediation, and stay current on emerging technologies and security threats., * Develop and execute IT audit work based on identified risks and regulatory requirements, including obtaining background information on the function or system being audited, performing a risk and control assessment, defining audit scope and objectives, and engaging stakeholders.

• Evaluate the design and effectiveness of IT controls, including IT general controls and application controls, to mitigate risks and support operational efficiency.
• Perform audit tests including walkthroughs, interviews, data analysis, and other procedures as applicable.
• Apply data analytics to scoping, population completeness, exception testing, and repeatable audit procedures.
• Document audit workpapers, findings, and recommendations in accordance with professional standards.
• Ensure IT systems and processes comply with relevant regulations, standards (e.g., SOX, ISO, NIST), and internal policies.
• Evaluate the security posture of IT systems, including identity and access management, data security, network security, cybersecurity, and vulnerability management.
• Assess AI governance practices, including inventory awareness, acceptable use controls, data handling for AI tools, human oversight, and alignment with internal and regulatory expectations.
• Perform TPRM-related audit work, including vendor control assessments, review of independent assurance reports, and evaluation of ongoing monitoring
• Conduct risk assessments related to emerging technologies, including cloud computing, big data, AI, and other relevant platforms.
• Identify opportunities for improvement in IT processes and controls and provide recommendations to management in a scheduled manner.
• Prepare and present clear and concise audit reports to management, highlighting key findings, risks, and recommendations.
• Effectively communicate and collaborate with IT professionals, business leaders, Security, Procurement, and external auditors.
• Track and follow up on the implementation of audit recommendations to ensure timely remediation of identified issues.
• Coordinate and deliver assigned reviews in a timely, efficient, and cost-effective manner without compromising quality.
• Stay abreast of emerging technologies, security threats, and regulatory changes to ensure audit practices remain current and effective.

• Minimum Bachelor’s degree. Concentration in Information Security, Information Systems, Computer Science, Risk Management, Business, Finance, or related field is a plus.
• 5 years of relevant experience in IT and operational internal audit, public accounting (Big 4), and/or Sarbanes-Oxley; risk consulting or internal control functions (e.g., internal audit, compliance, fraud mitigation).
• Ability to link business strategy to key processes and controls and understand risk implications and IT impacts.
• Ability to assess the control design and effectiveness of key systems.
• Ability to assess programs and projects, including governance and solution designs.
• Have visibility of and understand the IT Roadmap and engage with Management on future developments.
• Understanding best practice IT program management requirements.
• Demonstrated use of data analytics and data visualization in audit, compliance, or risk testing. Experience with Power BI, or similar business intelligence tools required, with Power BI strongly preferred.
• Working knowledge of security compliance concepts and common frameworks (e.g., NIST, ISO 27001, SOX ITGC).
• Familiarity with TPRM/vendor risk assessment and audit
• Working knowledge of AI governance, responsible AI principles, AI-related risks, and regulatory expectations. Experience using generative AI tools (e.g., Microsoft Copilot, ChatGPT, or similar technologies) to improve audit efficiency, analytics, reporting, and knowledge management is highly desirable.
• Experience in auditing SAP HANA or comparable ERP environments is a plus.
• Proficiency in SQL and at least one programming language commonly used in data analytics (Python preferred).
• CISA, CISSP, CISM, CIA, or comparable certification obtained or in progress is a plus.
• Demonstrates experience establishing regular and collaborative engagement across the organization with key risk stakeholders to drive risk awareness and transparency.

$135,000 - $151,000, $135,000 - $151,000

The salary offered will depend on several factors, including your location, level, education, training, specific skills, years of experience, and comparison to other employees already in this role. In addition to a comprehensive benefits package, candidates may be eligible for other forms of compensation, such as participation in bonus and equity award programs. EEO Statement

Supermicro is a Top Tier provider of advanced server, storage, and networking solutions for Data Center, Cloud Computing, Enterprise IT, Hadoop/ Big Data, Hyperscale, HPC and IoT/Embedded customers worldwide. We are the #5 fastest growing company among the Silicon Valley Top 50 technology firms. Our unprecedented global expansion has provided us with the opportunity to offer a large number of new positions to the technology community. We seek talented, passionate, and committed engineers, technologists, and business leaders to join us.