Senior IT Auditor, Internal Audit

SYX Services Pvt ltd

For over 70 years Global Industrial has been an industry leader providing private label and brand name industrial equipment and supplies to businesses throughout North America.

We carry over one million industrial, material handling and business products that are sold through our website, corporate sales people and full color catalogs. We are constantly increasing our product offerings to meet the diverse and changing needs of our customers. Our customers include small to large corporations, institutions, government agencies and consumers across North America.

Key Responsibilities

IT Application Controls (ITAC) and Interfaces
Lead walkthroughs and testing of automated application controls and system interfaces that support financial reporting, including the general ledger interface, the ERP to WMS warehouse interface, cash application, the SuccessFactors to payroll feed, and the real-time tax calculation.
Evaluate automated calculations, configurable controls, edit and validation checks, tolerance and approval limits, and interface completeness and accuracy across significant financial-reporting processes.
Assess whether automated controls and the system-generated reports that support manual controls (information produced by the entity) can be relied upon, including report logic and data integrity.
Technology Implementation and Transformation Assurance
Lead risk-based pre-implementation, implementation, and post-implementation reviews of significant ERP, SaaS, cloud, WMS, CRM, and other technology initiatives.
Evaluate project governance, requirements and solution design, security and role design, segregation of duties, configuration controls, system interfaces, data conversion and reconciliation, user acceptance testing, cutover planning, and go-live readiness.
Identify implementation risks early and provide practical recommendations to project sponsors and technology leaders while preserving Internal Audit's independence.
Monitor significant implementation risks, defects, decisions, and remediation through stabilization, and assess whether new or modified systems are designed to support SOX, operational, cybersecurity, privacy, and regulatory requirements before production deployment.
SOX and Integrated Audit Support
Support the annual SOX IT scoping and risk assessment across the reporting entities, keeping IT and business-process controls aligned.
Evaluate control deficiencies, assess severity and root cause, and partner with IT and business owners to design and validate timely remediation.
Coordinate directly with the external auditor on IT scope, testing approach, and evidence, promoting reliance on management's testing and reducing duplication of effort.
Assess reliance on third-party SOC 1 and SOC 2 reports for outsourced and SaaS platforms, including review of complementary user entity controls.
PCI DSS and Cybersecurity
Support the annual PCI DSS assessment, including scoping of the cardholder data environment, evidence coordination, SAQ D and Attestation of Compliance support, and quarterly ASV scan follow-up, working with the qualified assessor.
Perform or support reviews of cybersecurity and information-security controls, including monitoring and logging, vulnerability and patch management, and privileged access, measured against the Company's Information Security Policy.
Data Analytics and Continuous Auditing
Use data analytics to test full populations rather than samples, such as user-access extracts, change logs, job logs, and segregation-of-duties analysis, and help build repeatable, automated audit routines.
Support the department's audit technology, including AuditBoard / Optro as the evidence and workpaper platform and ongoing GRC and segregation-of-duties tooling initiatives.
People Leadership, Review, and Stakeholder Management
Manage and develop assigned IT Audit staff, which may include direct reports; set clear expectations, allocate and monitor work, review workpapers and testing for quality, accuracy, consistency, and timely completion, and provide ongoing feedback, coaching, on-the-job training, and career-development support.
Serve as a credible point of contact for IT, security, and business control owners, build strong working relationships, and communicate findings clearly and professionally.
Help refine IT audit methodology, templates, and testing standards, and contribute to a well-run, repeatable IT audit program.

Competencies and skills

Qualifications

• Bachelor's degree in Information Systems, Computer Science, Accounting, Finance, or a related field is required.
• Certified Information Systems Auditor (CISA) certification is strongly preferred. Candidates without CISA should demonstrate equivalent IT audit experience and be willing to obtain the certification within an agreed-upon period. Certified Internal Auditor (CIA), Certified Information Systems Security Professional (CISSP), Certified in Risk and Information Systems Control (CRISC), or another relevant professional certification is a plus.
• Four or more years of progressive experience in IT audit, technology risk, SOX compliance, or technology implementation assurance. Experience in public accounting or an Internal Audit function at a publicly traded company is strongly preferred. Experience leading engagements and reviewing, coaching, or supervising junior staff is required; prior direct people-management experience is preferred.
• Hands-on experience testing ITGCs and ITACs over ERP and SaaS environments; experience with SAP, Oracle databases, JD Edwards, Active Directory, or cloud platforms (OCI, Azure, or AWS) is strongly preferred.
• Demonstrated experience reviewing significant system implementations or major technology-change projects, including project governance, security design, data conversion, interfaces, user acceptance testing, cutover, and go-live readiness.
• Working knowledge of the COSO Framework, COBIT or another recognized IT governance framework, SOX and ICFR, systems development life cycle and project governance, IT audit methodology, risk assessment, deficiency evaluation, and remediation.
• Experience coordinating with external auditors and control owners.
• Experience with PCI DSS, cybersecurity control frameworks (NIST or ISO 27001), or SOC report evaluation is highly desirable.
• Experience with data analytics or audit automation (Excel, SQL, Power BI, ACL, IDEA, or similar) is highly desirable.
• Strong analytical, problem-solving, documentation, and project-management skills, with the ability to manage multiple priorities and deadlines.
• Excellent written and verbal communication skills, including the ability to explain technical issues to non-technical stakeholders.
• Ability to collaborate effectively across U.S. and India time zones, including reasonable schedule flexibility, and to travel up to 15% as business needs require.

Important Facts