Epicor
IT Audit Principal
US, Austin Las Cimas · Principal
Sponsorship not specifiedDetected 1 day ago
AzureCloud PlatformsRESTCybersecurityComplianceStakeholder ManagementSalesforceBusiness DevelopmentAccountingAuditingHRISLeadershipCommunicationProblem SolvingMentoringInternal AuditCISSP
About the role
- Join 5,000 talented professionals in creating a world of better business through data, AI, and cognitive ERP.
- We help businesses stay future-ready by connecting people, processes, and technology.
- From software engineers who command the latest AI technology to business development reps who help us seize new opportunities, the work we do matters.
Responsibilities
- Lead the evaluation and ongoing monitoring of ITGCs to ensure adequate design, operating effectiveness, efficiency, and compliance with SOX requirements and regulatory expectations.
- Drive evaluation of broader cybersecurity programs (e.g., NIST, ISO 27001) as dictated by our audit plan and underlying business objectives.
- Partner with cybersecurity teams to assess risks related to cloud environments, infrastructure, and applications, ensuring appropriate controls are designed and operating effectively.
- Lead root cause analysis and provide recommendations for control deficiencies, including those related to cybersecurity incidents and/or control gaps.
- Provide independent and objective advisory to IT and business stakeholders on control design, risk mitigation, and cybersecurity best practices.
- Develop, review, and maintain IT control documentation, including process flows, narratives, and control matrices, ensuring alignment with both SOX and cybersecurity requirements.
- Support executive leadership with special project advisory that inform strategic initiatives, risk assessments, and special transformational projects as needed.
- Build and leverage AI solutions and workflows to enable capacity or unlock capability for an Internal Audit function.
- Ability to manage multiple priorities, execute complex tasks, and operate both strategically and tactically.
Requirements
- If you have interest in this or any role- but your experience doesn't match every qualification of the job description, that's okay- consider applying regardless.
- Bachelor's degree in Information Systems, Cybersecurity, Accounting, Finance, or related field.
Nice to have
- Assess cybersecurity controls that intersect with ITGC domains, including identity and access management, privileged access, logging/monitoring, vulnerability management, and incident response.
- Provide thought leadership and partnered advisory in the planning, scoping, and execution of IT SOX testing activities, including risk assessments and control rationalization.
- Evaluate System Development Life Cycle (SDLC) controls to ensure secure system implementation practices, including secure coding, change management, and vulnerability remediation.
- Act as a liaison to external auditors for ITGC and cybersecurity-related audits, ensuring alignment and timely communication of findings.
- Oversee and enhance the quarterly SOX certification process, incorporating cybersecurity risk considerations where applicable.
- Monitor emerging cybersecurity threats, regulatory changes, and industry trends, and assess their impact on the organization's control environment.
- Enable continuous improvement initiatives across IT Audit and cybersecurity programs, including automation and deployment of new technologies.
- 8+ years of progressive experience in IT audit, IT compliance, SOX, and/or cybersecurity risk management (public accounting and/or industry).
Benefits
- Comprehensive health and wellness benefits designed to support your overall well-being.
Company info
- What can set you apart
This listing is sourced directly from Epicor's careers page and normalized into a canonical job model.