IT Auditor

Are you an experienced technology professional looking to apply your expertise to risk management, resilience, and operational excellence across one of the world's largest technology environments?

Microsoft Internal Audit is seeking an IT Auditor to evaluate risks, controls, and governance across cloud services, datacenter operations, infrastructure, cybersecurity, networking, software engineering, and emerging technologies, including AI. In this role, you will assess whether technology systems and processes effectively manage risk and support secure, reliable, and scalable operations.

As an individual contributor, you will lead risk-based audits across planning, fieldwork, reporting, and follow-up, partnering with engineering, operations, security, and business stakeholders to identify control gaps, evaluate technology risks, and provide objective insights.

This role is ideal for professionals who enjoy understanding complex systems, identifying improvement opportunities, and communicating technical risks to both technical teams and executive leadership.

• The IT Auditor is responsible for evaluating risks and controls for software development, service operation, IT infrastructure, security, and related processes. This evaluation will be accomplished by conducting internal audit projects to include the communication of observations, risks, recommendations, and conclusions reached, as well as providing consulting services regarding risk and controls on a wide range of projects and corporate initiatives.
• Conduct reviews in highly technical areas of current/emerging technologies including artificial intelligence, various cloud environments, security, networking, Windows, and Unix.
• Remain current and increase knowledge in the areas of auditing, business, company products and company information and Microsoft technologies, applications and other related technologies, utilizing self-study and/or continuing education efforts.
• Develop draft audit reports by identifying and gathering support for potential issues, and recommending solutions.
• Utilize departmental audit systems to manage projects, work papers, risk assessment, reporting and reporting follow-up.
• Communicate with departmental representatives and client management regarding the project status.
• Coordinate with external auditors (as needed), and work with outside contractors with respect to specific IT audit engagements.
• Establish and maintain proficient customer relationships with internal stakeholders, managers and staff.

Required/minimum qualifications

• Bachelor's Degree in Business, Computer Science, Engineering, or related field AND 3+ years auditing, security, privacy, control and compliance, or related experience OR equivalent experience.

Additional or preferred qualifications

• A BS/BA degree, preferably in information systems, computer science, engineering or other related IT field or a minimum of 5 years of experience in hardware or software product development, IT audit, IT Assurance or closely related field, security operations.
• Knowledge of external leading risk and controls frameworks such as COBIT (Control Objectives for Information and related Technology), ISO27000, NIST, and IT related internal controls.
• Professional certification such as CISSP, GIAC, MCP, CCNA, CISA, CIA, AZ-500, or AZ-104.
• Experience with cloud operations, networks, security and specialized skills and experience.
• Experience conducting datacenter audits and staying abreast of Artificial Intelligence (AI) developments.

Information Systems Auditing IC3 - The typical base pay range for this role across the U.S. is USD $77,800 - $153,700 per year. There is a different range applicable to specific work locations, within the San Francisco Bay area and New York City metropolitan area, and the base pay range for this role in those locations is USD $102,200 - $169,900 per year.

Certain roles may be eligible for benefits and other compensation. Find additional benefits and pay information here:

This position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled.

Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances. If you need assistance with religious accommodations and/or a reasonable accommodation due to a disability during the application process, read more about requesting accommodations.