> Markdown version of [/jobs/ext/86821-sr-technology-auditor](https://www.wearedevelopers.com/jobs/ext/86821-sr-technology-auditor). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Sr. Technology Auditor - **Company:** Gap Inc. - **Location:** San Francisco, CA, United States - **Experience:** Expert - **Salary:** $96,700.0 - $125,700.0 - **Contract:** Permanent contract - **Skills:** Amazon Web Services, Microsoft Azure, Computer-Aided Audit Tools, Cloud Computing, Control Objectives for Information and Related Technology (COBIT), Cyber Security, Databases, Data Infrastructure, Identity and Access Management, Information Technology Audit, Information Technology Operations, IT General Controls (ITGC), Data Analytics, RSA Archer Platform, Servicenow - **Published:** May 14, 2026 - **Apply:** https://www.gapinc.com/en-us/jobs/w22/26/sr-technology-auditor ## About the Role * 3-4 years of experience in IT auditing, risk management, or information security. * Experience with SOX IT controls (ITGCs & ITACs) and a solid understanding of ICFR concepts and financial reporting risks. * understanding of IT environments, including applications, infrastructure, databases, and cloud platforms (e.g., AWS, Azure). * Knowledge of IT risk and control frameworks (e.g., NIST, ISO 27001, COBIT) and core domains such as access management, change management, and IT operations. * Strong communication and interpersonal skills, with the ability to partner with stakeholders and influence outcomes. * Excellent organizational and project management skills, with the ability to manage multiple priorities and deliver high-quality work. 'b' Nice to Have: 'b' * Professional certifications such as CISA, CRISC, CISSP, or equivalent. * Experience working with external auditors and supporting SOX reliance strategies (e.g., SOC reports, CUECs). * Familiarity with audit tools, data analytics, and GRC platforms (e.g., AuditBoard, ServiceNow). * Experience in a retail or consumer-facing environment. ## Description The Internal Audit (\xe2\x80\x9cIA\xe2\x80\x9d) Department is seeking a highly motivated IT Audit Senior to join our Internal Audit team in the retail industry. This role focuses on executing IT operational audits and supporting SOX compliance efforts, including testing IT General Controls (ITGCs) and IT Application Controls (ITACs). The ideal candidate has 3\xe2\x80\x934 years of experience and a strong understanding of IT risk and control frameworks. This role is based in the San Francisco Office. 'b" What You'll Do "b' * Execute end-to-end IT audits, including planning, risk assessment, execution, and reporting, while driving alignment with cross-functional stakeholders. * Assess the design and operating effectiveness of IT controls across applications, infrastructure, and data environments, with a focus on key risk areas. * Identify systemic control gaps and emerging risks, and provide strategic, risk-based recommendations to strengthen the control environment. * Partner with IT, Security, and Compliance leadership to influence control design, risk mitigation strategies, and process improvements. * Deliver high-quality audit documentation and insights, and contribute to the evolution of audit methodologies and practices. * Lead execution of SOX IT testing, including IT General Controls (ITGCs) and IT Application Controls (ITACs), ensuring alignment with ICFR requirements. * Exercise judgment in evaluating control design and operating effectiveness, including assessing automated controls and system-generated reports. * Drive SOX activities including walkthroughs, RCM development and refinement, and scoping of in-scope systems and risks. ## Related Videos - [Applying Agile Principles to Incident Management ](https://www.wearedevelopers.com/videos/101-applying-agile-principles-to-incident-management) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Kubernetes and Microservices with Multi-Model Databases](https://www.wearedevelopers.com/videos/382-kubernetes-and-microservices-with-multi-model-databases) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [One Pipeline, Three Regulator - SBOM Compliance for the Developer](https://www.wearedevelopers.com/videos/100169-one-pipeline-three-regulator-sbom-compliance-for-the-developer) - [Fault Tolerance and Consistency at Scale: Harnessing the Power of Distributed SQL Databases](https://www.wearedevelopers.com/videos/1146-fault-tolerance-and-consistency-at-scale-harnessing-the-power-of-distributed-sql-databases) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Best Companies to work for in London: Top 25 Companies in 2023](https://www.wearedevelopers.com/magazine/187-best-companies-to-work-for-in-london-top-25-companies-in-2023) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [The Best Software Developer Blogs to Read](https://www.wearedevelopers.com/magazine/156-the-best-software-developer-blogs-to-read) - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers)