Senior IT Internal Auditor - SOX, Controls & AI Automation

Together, we share a collective passion and vision to protect consumers and help them grow, manage and secure their digital and financial lives. We’re always looking for smart, fearless and high-impact talent who see AI as a teammate – leveraging it to move faster and deliver meaningful results.

When you’re part of Gen, you’ll have the flexibility, tools and support to do your best work and grow your career – from flexible working options and time off to competitive pay, benefits and well-being programs.

At Gen, we are scrappy and relentlessly customer driven. We create room for healthy debate, experimentation and continuous learning, and we seek out people with different experiences, identities and ideas to join our team. You’ll work with people who back each other, respect each other and understand that our differences are a competitive advantage.

If this sounds like you, we’d love you to be part of Gen.

The Senior IT Internal Auditor – SOX, Controls & AI Automation is a technology-focused member of Gen Digital’s Internal Audit team. This role independently executes and helps lead SOX/ICFR, IT general controls, IT application controls, automated controls, and related internal audit activities from planning through documented conclusions..

• Plan, coordinate, and execute SOX walkthroughs and testing for IT general controls, IT application controls, automated controls, key reports, and related control activities.

• Perform and document tests of design and tests of operating effectiveness, including evaluation of control attributes, evidence, exceptions, and conclusions.

• Prepare and maintain accurate, review-ready documentation, including process narratives, system and control descriptions, process maps, risk and control matrices, support requests, testing workpapers, and issue documentation.

• Work directly with control owners, IT and business stakeholders, external auditors, and professional services firms to schedule walkthroughs, obtain evidence, resolve questions, and complete testing on time.

• Evaluate control design and operating effectiveness; identify deficiencies, root causes, risks, and practical recommendations; and support remediation tracking and validation.

• Lead assigned SOX or IT audit workstreams from planning through final conclusions with limited supervision, escalating scope, quality, timing, and control issues promptly.

• Participate in risk assessments, audit planning, scoping, and special projects involving technology, cybersecurity, privacy, cloud and SaaS environments, system implementations, acquisitions, and emerging risks.

• Execute planned technology, compliance, privacy, cybersecurity, operational, or other assurance projects in accordance with Internal Audit methodology and applicable professional standards.

• Use data analytics and audit tools to identify trends, anomalies, population completeness issues, and areas for increased audit focus.

• Develop, test, and scale repeatable analytics, automation, and AI-enabled approaches that improve audit efficiency, documentation quality, evidence review, or control coverage.

• Apply approved AI tools responsibly: protect confidential information, validate outputs against source evidence, document appropriate use, and ensure that human judgment remains primary for audit conclusions.

• Review selected work of staff or less-experienced auditors, provide constructive feedback, share templates and practical knowledge, and help build team capability.

• Track multiple projects, milestones, evidence requests, review comments, and deliverables; communicate status, blockers, and decisions clearly to Internal Audit leadership.

• Build collaborative and trusted relationships across regions and functions while maintaining Internal Audit’s objectivity and independence.

• Stay current on SOX, ICFR, IIA standards, technology risk, cybersecurity, privacy, data analytics, automation, and AI developments relevant to the role.

• Bachelor’s degree in information systems, computer science, accounting, finance, business, or a related field; a master’s degree is a plus.

• Approximately 4-7+ years of experience in IT internal audit, SOX/ICFR, IT risk, external audit, compliance, risk assurance, or a related field.

• Practical experience with SOX 404 and IT control testing, including walkthroughs, tests of design, tests of operating effectiveness, evidence evaluation, and issue development.

• Working knowledge of IT general controls, IT application controls, access management, change management, computer operations, system-generated reports, and control evidence.

• Familiarity with the IIA’s professional practices framework or Global Internal Audit Standards, COSO, and risk-based auditing principles.

• Experience working with external auditors and cross-functional stakeholders in a complex, global, or publicly traded organization.

• Demonstrated ability to manage multiple priorities, meet deadlines, work independently, and produce high-quality, well-supported workpapers.

• Strong analytical, critical-thinking, problem-solving, and written and verbal communication skills.

Preferred qualifications

• CISA, CIA, CPA, CISSP, CA, CFE, or another relevant certification; active progress toward a relevant certification is also valued.

• Experience with Optro (AuditBoard) or a comparable audit management and workpaper platform.

• Experience with Excel, Power Query, Power BI, Tableau, Python, SQL, or comparable data-analysis tools.

• Experience using automation, AI, or workflow tools to improve audit testing, evidence review, reporting, or documentation.

• Experience auditing cloud, SaaS, ERP, identity and access management, cybersecurity, privacy, or other technology-enabled environments.

• Public accounting, professional services, financial services, or other highly regulated industry experience.

• Familiarity with Visio, Lucidchart, or comparable process-mapping tools.

Core competencies

• Professional skepticism and sound judgment

• Ownership, accountability, and reliable execution

• Risk-based thinking and issue evaluation

• Clear, concise, business-focused communication

• Stakeholder management and collaboration across cultures and time zones

• Coaching, knowledge sharing, and constructive review

• Data literacy and continuous improvement mindset

• Responsible use of automation and AI

• Attention to detail and commitment to high-quality work product

Working expectations

• Ability to collaborate with U.S. and global teams across time zones.

• Flexibility to accommodate key meetings and audit deadlines.

• Ability to work in a hybrid environment in accordance with Gen Digital and local requirements. (3 Days in office)

• TA Screening Call
• Technical Interview #1
• Technical Interview # 2
• Stakeholder Chat #1
• Stakeholder Chat #2