IT Audit Professional – Cloud Security & AI Governance

About the role

Our client, a global internal audit and risk advisory firm, is looking for an experienced IT Audit Professional to lead technology‑focused assurance engagements for mid‑market and enterprise clients worldwide. You will own the full audit lifecycle, delivering findings to audit committees and senior management while advising on cloud security, AI governance, IT general controls, and SOC 2 readiness.

Key responsibilities

• Plan and execute IT audit engagements covering cloud security, AI governance, ITGC, application controls, and SOC 2 readiness.
• Develop risk‑based test plans aligned with COBIT, NIST CSF, NIST AI RMF, ISO 27001, and IIA standards.
• Perform control walkthroughs, technical testing, and evidence evaluation; produce detailed workpapers.
• Draft findings using the CCCE structure and present recommendations to senior stakeholders.
• Lead client exit conferences and review management responses.
• Conduct SOC 2 readiness assessments, gap analyses, and remediation roadmaps.
• Perform AI governance reviews, including model risk, bias assessment, and policy compliance.
• Audit cloud environments (AWS, Azure, GCP) focusing on identity, access, data protection, and configuration controls.
• Contribute to proposals, scoping models, and technical sections of deliverables.

Required profile

• 4‑7 years of experience in IT audit, information security, or technology risk advisory.
• Proven ability to execute ITGC, application control, SOX IT, and cloud security engagements.
• Hands‑on experience with SOC 2 readiness assessments.
• Professional‑level English communication skills, both written and verbal.
• Preferred certifications: CISA, CISSP, CRISC, CIA, CDPSE, CCSP.

Required skills

• AWS
• Microsoft Azure
• Google Cloud Platform (GCP)
• Cloud security
• AI governance
• SOC 2 readiness
• IT general controls (ITGC)
• Application controls
• NIST Cybersecurity Framework (CSF)
• COBIT
• ISO 27001
• NIST AI Risk Management Framework (AI RMF)

What we offer

• Payment in USD or local currency based on candidate preference.
• Part‑time or full‑time capacity with required overlap to US time zones.