IT Audit Senior

Requisition Number: 29639 Work Schedule and LocationThis position is based at our King of Prussia, PA office:500 North Gulph Road, King of Prussia, PA 19406The current in-office schedule requires three days per week on Tuesdays, Wednesdays, and Thursdays. Beginning in September 2026, the expectation will shift to four days in the office Monday through Thursday, with Fridays remaining remote.UGI Corporation (NYSE: UGI) is a holding company that distributes and markets energy products and services through our subsidiaries and the company’s common stock is a balanced growth and income investment. UGI Corporation has paid common dividends for more than 135 consecutive years.In addition to a challenging career and competitive compensation, our employees enjoy:Generous and Family-friendly Health & Welfare Benefits Including:• Medical, Vision, and Dental Plans • Optional Health Savings Account• Optional Dependent Care Savings Account• Paid Maternity/Paternity Leave• Work from home policy• Employee Assistance ProgramAdditional Benefits Include:• 401K with a generous company match• Tuition Reimbursement• Assistance with Professional Credentialing• Referral Bonuses• Employee Discount ProgramsPosition SummaryThe Senior IT Auditor conducts IT operational audits (e.g., Cloud Security, Vulnerability Assessment, SDLC, BCP/DR) and SOX ITGC compliance audits across the UGI enterprise. This role requires strong project management skills, proactive verbal and written communication, and a willingness to leverage emerging technologies including AI-powered tools to enhance audit quality and efficiency.Key ResponsibilitiesIT Operational Audits (40%)Develop risk and control matrices, audit approaches, and test procedures. Manage project timelines, coordinate with stakeholders, and proactively communicate status and deadlines to audit management.Execute test procedures and create concise, precise workpapers. Verify accuracy of all work product—including control owner assignments and data references—before submitting for review.Validate exceptions with auditees, collaborate on root cause analysis and remediation. Align with audit management on approach and messaging before drafting deliverables. Initiate discussions when timelines are at risk.Provide guidance to team members and lead project elements as needed.SOX ITGC Compliance (40%)Schedule and lead walkthroughs with control owners to understand IT processes and the control environment. Execute ITGC test procedures and document conclusions in workpapers.Communicate and validate deficiencies with auditees, external auditors, and the audit team. Align with management before changing stakeholder commitments or deadlines.Maintain ongoing awareness of ITGC status throughout the SOX cycle by communicating regularly with KPMG, control owners, and the Internal Controls & Compliance Team. Follow up on remediation actions.Innovation & AI Adoption (5%)Identify opportunities to enhance audit processes through automation and AI tools (e.g., Claude, data analytics platforms). Champion continuous improvement.Other & Administrative (15%)Ad hoc projects, audit tool administration, time reporting, one-on-ones, and CPE requirements.Professionalism ExpectationsCommunicate verbally with confidence—raise issues, ask questions, and engage in discussion rather than relying solely on email.Acknowledge assignments promptly, provide timelines, and keep management informed through regular verbal check-ins and written updates without requiring follow-up.Prepare stakeholder-ready deliverables tailored to the audience.Receive feedback constructively and apply it consistently to future work, demonstrating measurable improvement.QualificationsRequired:Bachelor’s degree3+ years IT audit experience (operational audits and SOX)2+ years SOX ITGC experienceKnowledge of IT processes: network, cloud security, OS, applications, databases, information securityKnowledge of AICPA/IIA standards, COSO, and COBIT frameworksWorking knowledge of common OS (Windows, UNIX/Linux), databases (SQL, Oracle), and ERP systems (SAP, JDE, Sage 100)Strong verbal and written communication skills—able to lead discussions, present findings, and engage stakeholders at all levelsStrong project management skills—plan timelines, coordinate stakeholders, track deliverables, escalate proactivelyAttention to detail with disciplined self-review of work productAbility to internalize feedback and carry lessons into future workPreferred:IT operational audit experience (Cloud Security, Vulnerability Assessment, SDLC, BCP/DR)CISA, CIA, or CISSP certificationEnergy/Utilities industry experienceFamiliarity with AuditBoard and data analytics toolsExperience with AI-powered audit and productivity toolsFrench and/or German language skillsAll offers of employment are contingent upon the successful completion of a background check and drug screen, subject to applicable laws and regulations.UGI Corporation is an Equal Opportunity Employer. The Company does not discriminate on the basis of race, color, sex, national origin, disability, age, gender identity, sexual orientation, veteran status, or any other legally protected class in its practices.