IT Auditor

Supermicro

. Plan and execute IT and technology-risk audits based on identified risks and regulatory requirements .

Posted 10/12/2026full-timeSan Jose • California • United StatesMid-LevelSenior💰 $135,000 - $151,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in IT and technology-risk audits, including compliance with SOX, ISO 27001, and NIST standards. Proficient in data analytics, risk assessments, and vendor risk management, with a strong ability to communicate findings and recommendations effectively.

Highest-signal resume keywords

IT Risk AuditingData AnalyticsPower BINIST ComplianceVendor Risk Assessment

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

SQLPythonData VisualizationAudit ProceduresControl AssessmentsIT General ControlsApplication ControlsCybersecurityAI GovernanceCloud Computing Risk Assessment

Soft Skills

Stakeholder EngagementCommunicationCollaborationProblem SolvingRecommendation Development

Tools & Technologies

Power BISAP HANAGenerative AI ToolsData Analytics ToolsBusiness Intelligence Tools

Certifications & Qualifications

CISACISSPCISMCIA

Industry Keywords

SOXISO 27001NISTThird-Party Risk ManagementIT RoadmapOperational Internal AuditPublic AccountingRisk ConsultingEmerging TechnologiesIT Security Posture

Tech Stack

Tools & technologies

CloudCyber SecurityERPPythonSQL

About the role

Key responsibilities & impact

Plan and execute IT and technology-risk audits based on identified risks and regulatory requirements
Obtain background information on audited functions or systems, perform risk and control assessments, define audit scope and objectives, and engage stakeholders
Evaluate the design and effectiveness of IT general controls and application controls
Perform walkthroughs, interviews, data analysis, and other audit procedures
Apply data analytics to scoping, population completeness, exception testing, and repeatable audit procedures
Document audit workpapers, findings, and recommendations according to professional standards
Assess compliance with SOX, ISO 27001, NIST, relevant regulations, and internal policies
Evaluate IT security posture, including identity and access management, data security, network security, cybersecurity, and vulnerability management
Assess AI governance practices, including inventory awareness, acceptable use controls, AI-tool data handling, and human oversight
Perform third-party risk management audit work, including vendor control assessments, independent assurance report reviews, and ongoing monitoring evaluation
Conduct risk assessments for cloud computing, big data, AI, and other emerging technologies
Identify improvement opportunities and provide recommendations to management
Prepare and present concise audit reports highlighting findings, risks, and recommendations
Collaborate with IT professionals, business leaders, Security, Procurement, and external auditors
Track audit recommendations and follow up on timely remediation
Coordinate and deliver assigned reviews efficiently and cost-effectively without compromising quality
Stay current on emerging technologies, security threats, and regulatory changes

Requirements

What you’ll need

Minimum Bachelor’s degree
5 years of relevant experience in IT and operational internal audit, public accounting (Big 4), Sarbanes-Oxley, risk consulting, or internal control functions
Ability to link business strategy to key processes and controls and understand risk implications and IT impacts
Ability to assess control design and effectiveness of key systems
Ability to assess programs and projects, including governance and solution designs
Understanding of the IT Roadmap and ability to engage with Management on future developments
Working knowledge of best practice IT program management requirements
Demonstrated use of data analytics and data visualization in audit, compliance, or risk testing
Experience with Power BI or similar business intelligence tools required; Power BI strongly preferred
Working knowledge of security compliance concepts and frameworks such as NIST, ISO 27001, and SOX ITGC
Familiarity with TPRM/vendor risk assessment and audit
Working knowledge of AI governance, responsible AI principles, AI-related risks, and regulatory expectations
Experience using generative AI tools such as Microsoft Copilot, ChatGPT, or similar technologies is highly desirable
Experience auditing SAP HANA or comparable ERP environments is a plus
Proficiency in SQL and at least one programming language commonly used in data analytics; Python preferred
CISA, CISSP, CISM, CIA, or comparable certification obtained or in progress is a plus
Experience establishing regular and collaborative engagement with key risk stakeholders to drive risk awareness and transparency

Benefits

Comp & perks

Comprehensive benefits package
Potential eligibility for bonus programs
Potential eligibility for equity award programs