IT Audit Associate - Digital Risk Services

Elliott Davis pairs forward-thinking tax, assurance and consulting services with industry-leading workplace culture. Our nine offices — located in the fastest growing cities in the US — are built on a foundation of inclusivity, collaboration, and collective growth. We work daily to provide exceptional service to our people, customers, and our communities. Audit and assurance services are provided by Elliott Davis, LLC (doing business in NC and D.C. as Elliott Davis, PLLC), a licensed CPA firm.

Position Overview

The Digital Risk Services IT Audit Associate supports the planning, execution, and completion of information technology audit and advisory engagements. The position works with engagement teams and clients to understand technology environments, obtain and evaluate audit evidence, test controls, document results, and communicate exceptions. Engagements may include IT general control audits, bank IT audits using Federal Financial Institutions Examination Council guidance, and Sarbanes-Oxley information technology control audits. The role is designed for an entry-level or experienced associate who can take on increasing responsibility as skills and experience develop

Responsibilities

• Assist with planning and performing IT audits, including documenting the technology environment, systems, processes, risks, and controls.
• Execute testing of IT general controls, including access security, user administration, change management, computer operations, backup and recovery, and related governance controls.
• Support bank IT audits using applicable Federal Financial Institutions Examination Council guidance and other banking regulatory expectations.
• Perform Sarbanes-Oxley information technology control testing, including IT general controls, automated controls, information technology-dependent manual controls, and key report testing, as assigned.
• Obtain and review policies, procedures, system configurations, reports, screenshots, tickets, and other evidence; follow up with client contacts when additional support is needed.
• Prepare clear, complete, and accurate workpapers that describe the procedures performed, evidence reviewed, testing results, and conclusions reached.
• Identify potential control gaps or exceptions, evaluate their significance with the engagement team, and help develop practical recommendations.
• Communicate engagement status, open requests, identified issues, and scheduling concerns to the engagement team in a timely manner.
• Participate in client meetings and interviews to understand processes, gather information, and explain testing requests.
• Assist with drafting audit findings, recommendations, internal audit reports, risk assessments, and other client deliverables.
• Build knowledge of client operations, industry practices, applicable control frameworks, and emerging technology risks.
• Collaborate effectively with team members, accept coaching, and contribute to a consistent, high-quality client experience.
• Manage assigned tasks across multiple engagements and meet established deadlines and quality expectations.
• Perform other duties as assigned.

Required Qualifications:

• Bachelor’s degree in accounting, information systems, computer science, cybersecurity, business, or a related field required.
• Zero to two years of relevant experience in IT audit, internal audit, external audit, risk consulting, information security, technology operations, or a related field. Internship experience may be considered for an entry-level candidate.
• Foundational understanding of technology risks, internal controls, and audit concepts. Exposure to IT general controls, Sarbanes-Oxley requirements, or bank regulatory guidance is preferred but not required for a lower-level associate.
• Professional certification, or progress toward a certification such as Certified Information Systems Auditor, Certified Internal Auditor, or Certified Public Accountant, is preferred but not required.
• Strong analytical, critical-thinking, organizational, and problem-solving skills.
• Clear written and verbal communication skills and the ability to interact professionally with clients and team members.
• Ability to learn new systems and audit approaches, manage multiple assignments, work both independently and as part of a team, and respond constructively to feedback.
• Proficiency with Microsoft Office applications, including Word and Excel.
• Access to reliable transportation for travel to assigned client locations, when required.
• Ability to work additional hours on occasion based on client and engagement needs.

We believe that when our employees are able to thrive in all facets of life, their work and impact are that much greater.
That's right – all aspects of life, not just your life as an employee, because we understand that there's life beyond your job. Here are some of the ways our work works for your life, your growth, and your well-being: 
•    generous time away and paid firm holidays, including the week between Christmas and New Year’s
•    flexible work schedules
•    16 weeks of paid maternity and adoption leave, 8 weeks of paid parental leave, 4 weeks of paid  and caregiver leave (once eligible) 
•    first-class health and wellness benefits, including wellness coaching and mental health counseling
•    one-on-one professional coaching
•    Leadership and career development programs
•    access to Beyond:  a one-of-a kind program with experiences that help you expand your life, personally and professionally

NOTICE TO 3RD PARTY RECRUITERS
Notice to Recruiters and Agencies regarding unsolicited resumes or candidate submissions without prior express written approval. Resumes submitted or candidates referred to any employee of Elliott Davis by any external recruiter or recruitment agency by any means (including but not limited to via Internet, e-mail, fax, U.S. mail, and/or verbal communications) without a properly executed written contract for a specified position by an authorized member of the Talent Acquisition team become the property of Elliott Davis. Elliott Davis will not be responsible for, or owe any fees associated with, referrals of those candidates and/or for submission of any information, including resumes, associated with individuals.
 

ADA REQUIREMENTS
The physical and cognitive/mental requirements and the work environment characteristics described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

Physical Requirements
While performing the duties of this job, the employee is:
•    Regularly required to remain in a stationary position; use hands repetitively to operate standard office equipment; and to talk or hear, both in person and by telephone
•    Required to have specific vision abilities which include close vision, distance vision, color vision, peripheral vision, depth perception, and the ability to adjust focus

Cognitive/Mental Requirements
While performing the duties of this job, the employee is regularly required to:
•    Use written and oral communication skills. 
•    Read and interpret data, information, and documents. 
•    Observe and interpret situations. 
•    Work under deadlines with frequent interruptions; and
•    Interact with internal and external customers and others in the course of work.