What are the responsibilities and job description for the Associate, Internal Audit – IT position at Confidential?
About the Role
Associate, Internal Audit – IT supports the evaluation of technology controls and risk management practices across a complex enterprise environment. This role focuses on executing risk-based IT audits, assessing cybersecurity and infrastructure risks, and strengthening overall technology governance.
Key Responsibilities
- Perform audits of IT general controls (ITGCs), applications, cybersecurity, and data processes
- Evaluate control design and effectiveness supporting business operations and financial reporting
- Assist with annual IT audit planning based on risk assessments
- Document testing, identify control gaps, and develop clear audit findings with actionable recommendations
- Support SOX IT compliance, including ITGC testing
- Partner with IT and business teams to understand systems and risks
- Leverage data analytics to enhance audit testing
- Track and validate remediation activities
Qualifications
- Bachelor’s degree in IT, Computer Science, Accounting, or related field
- 3 years of experience in IT audit, IT risk, or cybersecurity
- Knowledge of IT controls, cybersecurity frameworks (e.g., NIST, ISO), and SOX compliance
- Familiarity with cloud platforms (AWS, Azure, GCP) and enterprise systems
- Strong analytical, communication, and organizational skills
- Relevant certifications (CISA, CISSP, CIA) preferred or in progress
Preferred Skills
- Experience in financial services or a regulated environment
- Exposure to frameworks such as COBIT or COSO
- Data analytics experience (e.g., SQL, Python)
What You’ll Bring
A proactive, detail-oriented mindset with the ability to assess complex environments, communicate clearly, and contribute to a high-performing audit team.