IT Auditor (ITGC & Operational Technology)

Job Summary

We are looking for an experienced IT Auditor with strong expertise in IT General Controls (ITGC) and Operational Technology (OT) audits to join a large enterprise technology environment. The successful candidate will be responsible for assessing IT and OT control frameworks, evaluating security and governance processes, supporting audit and compliance activities, and ensuring technology risks are effectively managed across business-critical systems. Candidates with exposure to Operational Technology (OT) environments, Manufacturing Execution Systems (MES), Danieli Automation (DIMS), or similar industrial automation platforms will have a distinct advantage.

Key Responsibilities

• Perform IT General Controls (ITGC) audits across enterprise technology environments.
• Review and assess controls related to user access management, privileged access, change management, IT operations, backup and recovery, disaster recovery, and SAP Basis.
• Conduct audits and security assessments of Operational Technology (OT) environments, including OT General Controls (OTGC), cyber security controls, environmental controls, and server lifecycle management.
• Evaluate the effectiveness of security and governance controls across manufacturing and industrial automation systems.
• Support internal and external audits by preparing documentation, evidence, audit observations, and remediation plans.
• Identify technology risks, control weaknesses, and opportunities for process improvement.
• Maintain risk registers and track remediation activities through to completion.
• Assess compliance with governance frameworks and regulatory requirements, including ISO 27001, NIST CSF, COBIT, ITIL, GDPR, PCI-DSS, and SOX where applicable.
• Collaborate with Cyber Security, Infrastructure, SAP, Operations, and Business teams to strengthen the overall control environment.
• Prepare audit reports, executive summaries, dashboards, and risk presentations for senior management.
• Provide guidance on technology risk, governance, and control best practices across both IT and OT environments.

Required Experience

• 7-12+ years of experience in IT Audit, IT Risk, Information Security, Technology Governance, or Cyber Security.
• Strong hands-on experience auditing IT General Controls (ITGC), including access management, change management, IT operations, disaster recovery, and SAP Basis controls.
• Experience auditing or assessing Operational Technology (OT) environments from both a general controls and security perspective.
• Good understanding of Identity Access Management (IAM), Network Security, Cloud Security (AWS, Azure, or GCP), and industrial cyber security principles.
• Experience working with governance frameworks such as ISO 27001, NIST CSF, COBIT, and ITIL.
• Exposure to Manufacturing Execution Systems (MES), Danieli Automation (DIMS), or similar industrial automation platforms is highly desirable.
• Excellent analytical, documentation, stakeholder management, and communication skills.

Preferred Certifications

• CISA, CRISC, CISM, CISSP, ISO 27001 Lead Auditor or Lead Implementer

If youre an experienced IT Auditor with strong ITGC expertise and exposure to Operational Technology (OT) environments, wed love to hear from you. Join a team where youll play a key role in strengthening governance, security, and risk management across critical enterprise and manufacturing systems.