Sr IT Auditor

HERE Technologies is a location data and technology platform company. We empower our customers to achieve better outcomes – from helping a city manage its infrastructure or a business optimize its assets to guiding drivers to their destination safely.

 

At HERE we take it upon ourselves to be the change we wish to see. We create solutions that fuel innovation, provide opportunity and foster inclusion to improve people’s lives. If you are inspired by an open world and driven to create positive change, join us. Learn more about us on our YouTube Channel.

As a Senior IT Auditor, you will independently execute risk-based IT audit engagements across SOX 404 IT General Controls (ITGCs), application controls, cybersecurity, cloud technologies, privacy, artificial intelligence (AI), Generative AI (GenAI), and technology governance domains.

Working under the direction of the Lead IT Auditor, you will perform audit planning, risk assessments, control testing, reporting, and remediation validation activities while partnering with global stakeholders to strengthen governance, risk management, and compliance across the organization.

You are an experienced IT audit professional who enjoys understanding complex technology environments and translating technical risks into practical business insights. You bring strong audit execution skills, sound professional judgment, and the ability to build productive relationships across global teams.

• A bachelor's degree in Information Systems, Information Technology, Computer Science, Cybersecurity, Accounting Information Systems, or a related field.
• 4+ years of IT audit experience within a Big Four or national public accounting firm or experience in Internal IT Audit, Technology Risk Management, Cybersecurity Assurance, Risk & Compliance, or related disciplines.
• Experience executing audit engagements through planning, fieldwork, reporting, and remediation follow-up activities.
• Strong knowledge of SOX 404 compliance, including IT General Controls (ITGCs), automated controls, and application controls testing.
• Experience auditing enterprise applications, cloud environments, technology operations, databases, and IT processes.
• Experience conducting cybersecurity risk assessments, technology governance reviews, compliance assessments, and privacy reviews.
• Professional certification such as CISA or CISSP.
• Knowledge of industry frameworks including NIST, ISO/IEC 27001, CIS Controls, COBIT, ISO 27701, and ISO 42001.
• Experience reviewing SOC 1 and SOC 2 Type II reports.
• Understanding of cloud security and governance controls within Microsoft Azure and AWS environments.
• Familiarity with DevOps practices, CI/CD pipelines, and modern software development methodologies.
• Understanding of AI governance, Generative AI risks, Responsible AI principles, and large language model technologies.
• Experience using data analytics techniques and audit management platforms such as AuditBoard or similar solutions.