Senior IT Internal Auditor

Summary

The Senior IT Internal Auditor is responsible for evaluating and strengthening the company’s IT control environment across global operations. This role oversees and performs audits related to information technology infrastructure, security, and enterprise applications to ensure systems remain secure, compliant with SOX requirements, and aligned with business objectives. This position works closely with IT, Finance, and external auditors to assess system access controls, test IT General Controls (ITGC), and support ongoing compliance initiatives across the organization.

• Plan and execute IT audit activities across AOI operations in the United States, Taiwan, and China
• Evaluate the effectiveness of IT controls supporting enterprise systems and infrastructure
• Perform testing of business IT internal controls to support SOX compliance
• Conduct SAP access control testing and segregation of duties analysis
• Review HR system controls within ADP including hire, termination, and pay changes
• Confirm SOC reports are reviewed by responsible accounting personnel
• Review IT control documentation and audit work papers prepared by teams in Taiwan and China
• Test IT General Controls including security policies, access management, system monitoring, backups, and change management processes
• Review user account provisioning, modification, and termination across systems including SAP, Active Directory, VPN, ADP, and PLM
• Perform user access reviews and access configuration validation
• Evaluate IT staff segregation of duties and outsourced IT service controls
• Review and approve MIS service tickets related to system access and IT requests
• Evaluate SAP user access requests and perform segregation of duties checks using SAP GRC
• Review SAP user , modification, and termination requests
• Perform SAP GRC risk analysis semi annually
• Review and maintain SAP GRC rulesets annually
  
  Conduct SAP firefighter access reviews and SAP user access reviews
• Perform PLM user access reviews annually
• Support design and improvement of SAP GRC rulesets with external consultants
• Coordinate with internal teams to gather documentation requested by external IT auditors
• Support preparation of materials requested on external auditor PBC lists
  
  Participate in meetings with external auditors and respond to audit inquiries
• Provide recommendations to improve IT controls, audit processes, and internal control documentation
• Assist with improvements to internal systems and IT control structures when needed
• Support internal teams with Excel tables, formulas, and macros used in audit work papers

• Bachelor’s degree in Information Systems, Accounting, Computer Science, or related field
• 5+ years of experience in IT audit, IT compliance, or IT risk management
• Experience with SOX IT controls and IT General Controls (ITGC) testing
• Experience working with SAP environments and user access management
• Strong analytical, documentation, and communication skills
• Experience coordinating with external auditors preferred
• Bilingual in Mandarin Chinese is a plus

• CISA (Certified Information Systems Auditor)
• CPA, CIA, or other relevant certification

Occasional international travel to Taiwan and China (approximately 3% annually)

This position will be on-site based in Sugar Land, Texas.

• Flexible and competitive health (medical, dental, vision) plans offer the employee with the right options to meet individual and family needs
• Employer matching on 401(k) deferrals
• Generous PTO policy, with unused PTO payout at end of the year
• Relocation package available within US
• Immigration sponsor ships (Must be currently authorized to work in the US)