IT Audit Associate/Senior Auditor jobs in United States
cer-icon
Apply on Employer Site
company-logo

Johanson Group LLP · 18 hours ago

IT Audit Associate/Senior Auditor

Johanson Group LLP is seeking an IT Audit Associate/Senior Associate responsible for delivering a full range of attest services to clients and managing multiple projects. The role involves completing system and organization controls (SOC) engagements and ensuring client satisfaction through effective communication and project management.

ComplianceCyber SecurityInformation TechnologyTax Consulting
check
Diversity & Inclusion

Responsibilities

Excellent verbal and written English communication skills: clear, concise, professional
Strong analytical and basic research skills
Solid understanding of AICPA standards and reporting requirements
Knowledge of internal controls, security, privacy, audit, and control frameworks (e.g., SOC 2, SOC 1, NIST 800-53 / 171, HIPAA, etc.), and relevant professional standards and regulations
Solid organizational skills, especially the ability to meet project deadlines with a focus on details
Ability to successfully multi-task while working independently or within a remote group environment
Proven ability to work in a deadline-driven environment and manage multiple projects simultaneously
Execute assigned client engagements from start to completion with minimal supervision
Manage the day-to-day aspects of assigned engagements, including managing multiple work streams simultaneously and re-prioritizing tasks when unanticipated issues arise
Evaluate and test client-related business processes and information technology controls and understand areas of risk for each
Apply current knowledge of information technology trends and systems processes to identify security and risk management issues, as well as other opportunities for overall process improvement
Work well with internal team members and client personnel to successfully execute each engagement
Maintain professionalism and rapport with the client. Proactively interact with key client management to manage expectations, help ensure client satisfaction, meet client deadlines, and resolve any problems
Proactively interact with key client management to gather information, resolve problems, and make recommendations risk reducing control improvements
Exercise judgment and discretion related to conducting audit work
Promote an ethical and risk-aware culture at the company

Qualification

SOC 1NIST 800-53HIPAAGDPRCISACISSPGRC PlatformsCloud infrastructure managementDevOpsCI/CDAnalytical skillsCommunication skillsOrganizational skillsTime managementTeam player

Required

Excellent verbal and written English communication skills: clear, concise, professional
Strong analytical and basic research skills
Solid understanding of AICPA standards and reporting requirements
Knowledge of internal controls, security, privacy, audit, and control frameworks (e.g., SOC 2, SOC 1, NIST 800-53 / 171, HIPAA, etc.), and relevant professional standards and regulations
Solid organizational skills, especially the ability to meet project deadlines with a focus on details
Ability to successfully multi-task while working independently or within a remote group environment
Proven ability to work in a deadline-driven environment and manage multiple projects simultaneously
Execute assigned client engagements from start to completion with minimal supervision
Manage the day-to-day aspects of assigned engagements, including managing multiple work streams simultaneously and re-prioritizing tasks when unanticipated issues arise
Evaluate and test client-related business processes and information technology controls and understand areas of risk for each
Apply current knowledge of information technology trends and systems processes to identify security and risk management issues, as well as other opportunities for overall process improvement
Work well with internal team members and client personnel to successfully execute each engagement
Maintain professionalism and rapport with the client. Proactively interact with key client management to manage expectations, help ensure client satisfaction, meet client deadlines, and resolve any problems
Proactively interact with key client management to gather information, resolve problems, and make recommendations risk reducing control improvements
Exercise judgment and discretion related to conducting audit work
Promote an ethical and risk-aware culture at the company
Bachelor's degree in accounting, computer science, information systems or other related discipline
Experience working within a public accounting or internal auditing environment
Experience performing IT general controls and application control reviews
Strong time management and self-motivational skills, coupled with excellent verbal, written, and presentation skills
Excellent analytical, organizational and project management skills
Strong computer skills including proficiency in Microsoft Office, Salesforce, and other cloud-based applications
Ability to work additional hours as needed to meet project deadlines
Ability to work independently (100% Remote Position)
Team player and can do attitude

Preferred

Experience working with an offshore audit team (desired, but not required)
Experience working with GRC Platforms such as Vanta, Drata, Secureframe, etc. (desired, but not required)
Knowledge of cloud infrastructure management, DevOps and CI/CD, system access management, vulnerability management, and encryption systems management desired
In process or interest in pursuing a CISA, CISSP, or similar professional designation
CPA, CISA, CISM, CRISC, CGEIT, CISSP or other relevant certification (preferred)
Proficient in the use of Microsoft Office Suite, Google Suite, Salesforce, and other mainstream cloud-based applications and tools
Exposure to various operating systems and databases
Familiarity with DevOps, CI/CD, SaaS, PaaS, IaaS environments, major ERP platforms

Company

Johanson Group LLP

twittertwittertwitter
company-logo
Your trusted partner in comprehensive audit and security compliance services including SOC, ISO, HIPAA, GDPR, PCI DSS, and more.