IT Auditor at Soooc Technology

About the Position

An established company is seeking an experienced IT Auditor to join their team. This role involves planning and executing IT audits, assessing compliance with regulatory standards, and providing strategic recommendations to enhance the organization's IT governance and security posture.

Key Responsibilities

IT Audit & Risk Assessment

• Plan and execute IT audits across infrastructure, applications, networks, and cloud environments
• Assess ITGC, application controls, cybersecurity safeguards, and access controls
• Identify technology risks and provide actionable mitigation recommendations

Compliance and Governance

• Ensure adherence to regulatory standards such as ISO 27001, NIST, GDPR, NDPR, COBIT, COSO, and ITIL
• Support audit exercises and track remediation of identified risks
• Review effectiveness of IT governance and recommend improvements

Reporting & Stakeholder Engagement

• Prepare comprehensive audit reports detailing findings, risks, and recommendations
• Engage IT teams, leadership, and executives to communicate audit outcomes
• Participate in risk and control self-assessments across business units

Continuous Improvement

• Identify improvements to IT processes, controls, and security posture
• Stay updated on emerging risks, technology trends, and regulatory expectations

Required Qualifications

• Bachelor's degree in Information Technology, Computer Science, Accounting, or related field
• 3–6 years' experience in IT auditing, IT risk management, or information security
• Knowledge of IT frameworks: COBIT, COSO, ISO 27001, ITIL
• Hands-on audit experience across cloud, applications, networks, and cybersecurity
• Strong analytical and report-writing capabilities

Key Competencies

• Strong analytical and detail-oriented mindset
• High integrity and ability to handle sensitive information with confidentiality
• Excellent communication, documentation, and stakeholder management skills
• Strong organizational and time-management abilities

Preferred Qualifications

• Professional certifications: CISA, CRISC, CIA, or ISO 27001 Lead Auditor
• Familiarity with AWS, Azure, or GCP platforms and enterprise infrastructure
• Understanding of cybersecurity principles