SR IT Auditor in The Woodlands, Texas at Sterling Construction Company, Inc.

Sterling Infrastructure is seeking an experienced Senior IT Auditor to support IT Audit and SOX activities for a rapidly growing, decentralized, publicly traded organization. Reporting to the Director of Assurance, this role will be responsible for executing and supporting IT SOX compliance, IT audits, risk assessments, and technology control reviews across a complex, project-based environment.

This is a hands-on role that will partner closely with IT, Finance, Operations, and business leaders to evaluate technology risks, strengthen internal controls, support system implementations and major system changes, and help drive continuous improvement across the organization.

Essential Duties and Responsibilities

1. Execute and support the annual IT SOX compliance program, including oversight and coordination of third-party IT SOX activities.
2. Perform testing and evaluation of IT General Controls (ITGCs) and application controls, including access management, change management, system operations and other key technology controls.
3. Partner with business and IT control owners to identify control gaps, communicate findings and support appropriate remediation.
4. Perform IT risk assessments to support the development of the annual internal audit plan.
5. Plan and execute risk-based IT audits, including scoping, testing, documentation, reporting and follow-up on remediation activities.
6. Evaluate technology governance and compliance with internal policies, regulatory requirements and applicable control frameworks.
7. Provide audit and controls support for new system implementations, ERP upgrades and major system changes, including evaluating risks, control design, data integrity, access, change management and implementation readiness.
8. Participate in pre-implementation and post-implementation reviews to identify control or risk concerns and work with project teams to address findings.
9. Identify opportunities to strengthen and scale the IT control framework as the organization continues to grow.
10. Clearly communicate audit findings, risks and recommendations to IT leadership, business stakeholders and senior leadership.
11. Coordinate with external auditors and other assurance partners as needed.

Qualifications

1. Strong knowledge of IT SOX, ITGCs, internal controls and IT risk.
2. 5+ years of IT Audit, IT Risk, IT SOX or IT Compliance experience.
3. Public company and/or public accounting experience preferred.
4. Experience with system implementations, ERP upgrades or major technology changes from an audit or controls perspective.
5. Familiarity with frameworks such as COSO, COBIT, NIST and ISO.
6. Ability to independently execute audits, identify risks and communicate findings and recommendations.
7. Strong communication skills with the ability to work effectively with IT, business and senior leadership.
8. Proactive, solutions-oriented and comfortable working independently in a growing organization.
9. Bachelor’s degree in Accounting, Information Systems, Computer Science or related field.
10. CISA, CIA or CPA preferred.

We are an equal opportunity employer: We do not discriminate based on race, color, national origin, religion, creed, sex, sexual orientation, gender identity, disability, age, genetic information, marital status, military status, membership or activity in a local human rights commission, or status with regard to public assistance, or any other characteristic protected by applicable law.