IT Auditor (SOX)

We are looking for an experienced IT Auditor to join a SOX (Sarbanes-Oxley Act) compliance initiative supporting an Internationalization program. You'll play a key role in evaluating IT general controls (ITGCs) and application controls across critical systems used in finance and business operations. This role is a permanent role within Internal Audit & Controls post-project.

Key Responsibilities:

• Perform detailed testing of IT General Controls (ITGC) and IT Application Controls (ITAC) in accordance with SOX requirements.
• Perform detailed testing and evaluation of controls relevant to SOC reports.
• Execute detailed testing of ITGC in accordance with SOX:
  • Access Management including multi-factor authentication, segregation of duties, provisioning/deprovisioning across diverse identity platforms, and management of privileged access using e.g Cyberark, CommonFate
  • Change Management (CI/CD pipelines, DevOps, Agile environments)
  • Computer Operations (cloud infrastructure, backup, incident management, and especially batch job monitoring process)
• Conduct thorough testing of ITACs in transactional systems, such as:
  • Booking platforms (e.g., reservation engines)
  • Revenue recognition systems and related data integration
  • Payment gateways and fraud detection logic
  • Customer data management and loyalty program applications
• Apply knowledge of auditing cloud-based infrastructure (AWS, GCP, Azure) and SaaS-based platforms (e.g., Salesforce, Oracle Cloud, Workday)

Requirements:

• 3-5 years of IT audit or risk consulting experience with a primary focus on testing ITGC and ITAC in accordance with SOX requirement in high-transaction volume environments
• Knowledge of auditing digital product platforms, microservices architecture, and API-based workflows is highly desirable.
• Proven ability to independently execute all phases of ITGC and ITAC testing.
• Understanding of real-time transactional systems and high-availability environments.
• Familiarity with digital product platforms, microservices architecture, and API-based workflows.
• Experience auditing controls over customer-facing applications, payment integrations, and mobile/web platforms.
  

Argyll Scott Asia is acting as an Employment Agency in relation to this vacancy.