IT Audit Specialist Jobs
IT Audit Specialist jobs are open across financial services, healthcare, government, and technology, at levels from entry-level to senior and manager, with specializations in SOX compliance, IT general controls, and cybersecurity auditing. See the openings below and apply to the ones that match your experience.
Find IT Audit Specialist JobsOverview
Showing 5 of 140+ IT Audit Specialist jobs
We’re building a world of health around every individual — shaping a more connected, convenient and compassionate health experience. At CVS Health®, you’ll be surrounded by passionate colleagues who care deeply, innovate with purpose, hold ourselves accountable and prioritize safety and quality in everything we do. Join us and be part of something bigger – helping to simplify health care one person, one family and one community at a time.
A Brief Overview
The Cybersecurity Senior Analyst is a key member of the Internal Audit team responsible for executing cybersecurity audits and control assessments across the organization’s technology environment. This role performs detailed testing of security controls and information systems to evaluate the design and operating effectiveness of cybersecurity defenses and support the overall assessment of the organization’s control framework.
What You Will Do
Audit Execution
- Independently execute cybersecurity audit testing, including performing detailed test procedures, evaluating control design and operating effectiveness, and documenting results in accordance with audit standards and methodology.
- Own assigned audit areas end-to-end, including walkthroughs, evidence collection, validation, and workpaper documentation, ensuring accuracy, completeness, and audit defensibility.
- Perform testing procedures to assess key cybersecurity domains, including cloud security (Azure & GCP), network security, data protection, application security, and third-party/vendor risk management.
- Identify control gaps, document exceptions, and contribute to the development of audit findings and recommendations.
- Apply risk-based thinking when evaluating issues, including consideration of mitigating and compensating controls.
Audit Team Support
- Collaborate with Audit Managers and team members to support audit execution, validate control effectiveness, and ensure timely completion of deliverables.
- Partner with IT, compliance, and business stakeholders to understand processes, obtain evidence, and validate remediation activities.
- Build and maintain effective working relationships across technology teams.
Analytics & Continuous Improvement
- Leverage data analytics and emerging technologies (e.g., AI tools) to enhance audit testing procedures, coverage, and efficiency.
- Contribute to continuous improvement of audit methodologies, tools, and testing approaches.
Reporting & Communication
- Develop clear, concise, and well-supported workpapers and documentation.
- Effectively communicate audit results, issues, and risks to audit team members and management.
Professional Development & Knowledge Sharing
- Stay current on cybersecurity risks, trends, tools, and techniques and apply insights to audit testing and risk identification.
- Support knowledge sharing and training efforts within Internal Audit to enhance cybersecurity awareness and capabilities.
Required Qualifications
- 3+ years of experience in information security, risk, or compliance, with a focus on cybersecurity controls.
- At least one relevant cybersecurity certification (e.g., CISSP, CISM, or equivalent)
Preferred Qualifications
- Experience in a large, complex environment (e.g., healthcare, insurance, or retail).
- Demonstrated ability to independently execute moderately complex audit or control testing areas.
- Working knowledge of regulatory and industry frameworks (e.g., HIPAA, ISO, PCI DSS, NY DFS, NAIC, SOX, HITRUST).
- Familiarity with cybersecurity domains such as cloud security, vulnerability management, ransomware, and security testing tools.
- Proven ability to collaborate across teams and build strong stakeholder relationships.
- Strong analytical, problem-solving, and critical thinking skills.
- Effective written and verbal communication skills.
Education
- Bachelor’s degree in Information Technology, Cybersecurity, or a related field preferred or equivalent experience (High School Diploma + 4 years of relevant experience).
Anticipated Weekly Hours
40Time Type
Full timePay Range
The typical pay range for this role is:
$79,310.00 - $158,620.00This pay range represents the base hourly rate or base annual full-time salary for all positions in the job grade within which this position falls. The actual base salary offer will depend on a variety of factors including experience, education, geography and other relevant factors. This position is eligible for a CVS Health bonus, commission or short-term incentive program in addition to the base pay range listed above.
Our people fuel our future. Our teams reflect the customers, patients, members and communities we serve and we are committed to fostering a workplace where every colleague feels valued and that they belong.
Great benefits for great people
We take pride in offering a comprehensive and competitive mix of pay and benefits that reflects our commitment to our colleagues and their families.
This full‑time position is eligible for a comprehensive benefits package designed to support the physical, emotional, and financial well‑being of colleagues and their families. The benefits for this position include medical, dental, and vision coverage, paid time off, retirement savings options, wellness programs, and other resources, based on eligibility.
Additional details about available benefits are provided during the application process and on Benefits Moments.
We anticipate the application window for this opening will close on: 12/18/2026
Qualified applicants with arrest or conviction records will be considered for employment in accordance with all federal, state and local laws.
We’re building a world of health around every individual — shaping a more connected, convenient and compassionate health experience. At CVS Health®, you’ll be surrounded by passionate colleagues who care deeply, innovate with purpose, hold ourselves accountable and prioritize safety and quality in everything we do. Join us and be part of something bigger – helping to simplify health care one person, one family and one community at a time.
A Brief Overview
The Cybersecurity Senior Analyst is a key member of the Internal Audit team responsible for executing cybersecurity audits and control assessments across the organization’s technology environment. This role performs detailed testing of security controls and information systems to evaluate the design and operating effectiveness of cybersecurity defenses and support the overall assessment of the organization’s control framework.
What You Will Do
Audit Execution
- Independently execute cybersecurity audit testing, including performing detailed test procedures, evaluating control design and operating effectiveness, and documenting results in accordance with audit standards and methodology.
- Own assigned audit areas end-to-end, including walkthroughs, evidence collection, validation, and workpaper documentation, ensuring accuracy, completeness, and audit defensibility.
- Perform testing procedures to assess key cybersecurity domains, including cloud security (Azure & GCP), network security, data protection, application security, and third-party/vendor risk management.
- Identify control gaps, document exceptions, and contribute to the development of audit findings and recommendations.
- Apply risk-based thinking when evaluating issues, including consideration of mitigating and compensating controls.
Audit Team Support
- Collaborate with Audit Managers and team members to support audit execution, validate control effectiveness, and ensure timely completion of deliverables.
- Partner with IT, compliance, and business stakeholders to understand processes, obtain evidence, and validate remediation activities.
- Build and maintain effective working relationships across technology teams.
Analytics & Continuous Improvement
- Leverage data analytics and emerging technologies (e.g., AI tools) to enhance audit testing procedures, coverage, and efficiency.
- Contribute to continuous improvement of audit methodologies, tools, and testing approaches.
Reporting & Communication
- Develop clear, concise, and well-supported workpapers and documentation.
- Effectively communicate audit results, issues, and risks to audit team members and management.
Professional Development & Knowledge Sharing
- Stay current on cybersecurity risks, trends, tools, and techniques and apply insights to audit testing and risk identification.
- Support knowledge sharing and training efforts within Internal Audit to enhance cybersecurity awareness and capabilities.
Required Qualifications
- 3+ years of experience in information security, risk, or compliance, with a focus on cybersecurity controls.
- At least one relevant cybersecurity certification (e.g., CISSP, CISM, or equivalent)
Preferred Qualifications
- Experience in a large, complex environment (e.g., healthcare, insurance, or retail).
- Demonstrated ability to independently execute moderately complex audit or control testing areas.
- Working knowledge of regulatory and industry frameworks (e.g., HIPAA, ISO, PCI DSS, NY DFS, NAIC, SOX, HITRUST).
- Familiarity with cybersecurity domains such as cloud security, vulnerability management, ransomware, and security testing tools.
- Proven ability to collaborate across teams and build strong stakeholder relationships.
- Strong analytical, problem-solving, and critical thinking skills.
- Effective written and verbal communication skills.
Education
- Bachelor’s degree in Information Technology, Cybersecurity, or a related field preferred or equivalent experience (High School Diploma + 4 years of relevant experience).
Anticipated Weekly Hours
40Time Type
Full timePay Range
The typical pay range for this role is:
$79,310.00 - $158,620.00This pay range represents the base hourly rate or base annual full-time salary for all positions in the job grade within which this position falls. The actual base salary offer will depend on a variety of factors including experience, education, geography and other relevant factors. This position is eligible for a CVS Health bonus, commission or short-term incentive program in addition to the base pay range listed above.
Our people fuel our future. Our teams reflect the customers, patients, members and communities we serve and we are committed to fostering a workplace where every colleague feels valued and that they belong.
Great benefits for great people
We take pride in offering a comprehensive and competitive mix of pay and benefits that reflects our commitment to our colleagues and their families.
This full‑time position is eligible for a comprehensive benefits package designed to support the physical, emotional, and financial well‑being of colleagues and their families. The benefits for this position include medical, dental, and vision coverage, paid time off, retirement savings options, wellness programs, and other resources, based on eligibility.
Additional details about available benefits are provided during the application process and on Benefits Moments.
We anticipate the application window for this opening will close on: 12/18/2026
Qualified applicants with arrest or conviction records will be considered for employment in accordance with all federal, state and local laws.
IT Audit Specialist Jobs by Experience Level
See All 140+ IT Audit Specialist Jobs
Find roles that match your experience and apply in just a few clicks.
Find IT Audit Specialist JobsIT Audit Specialist Job Market
Who's Hiring
- Baker Tilly Canada19
- Block4
- Grant Thornton4
- Crowe3
- Northwest Bank3
Top Industries Hiring
- Accounting & Auditing
- Banking & Financial Services
- Education
- Staffing & Recruiting
- Technology & Software
What Employers Look For
The qualifications that appear most often in IT audit specialist jobs.
- Bachelor's degree in accounting, information systems, computer science, or a related field
- CISA certification or active pursuit of CISA required or strongly preferred
- Experience conducting IT general controls testing for SOX compliance engagements
- Working knowledge of risk frameworks including COBIT, NIST, or ISO 27001
- Proficiency with audit management and GRC platforms used to document and track findings
- Strong written communication skills for drafting audit reports and presenting findings to management
Tips for Your IT Audit Specialist Job Search
Tailor your resume to control frameworks
Hiring managers scan for specific frameworks like COBIT, NIST, and ISO 27001. List the ones you've applied directly in audit work, not just studied. Vague references to 'IT security' won't distinguish you from candidates without hands-on audit experience.
Lead with your certification status clearly
CISA, CRISC, and CIA credentials belong in your resume header, not buried in a skills section. If you're a candidate in progress, write 'CISA candidate, exam scheduled [month]' so reviewers don't discard your application before reading further.
Apply early to roles that fit
Migrate Mate lists it audit specialist openings from across the United States in one place, so you can find roles that match and apply directly to each listing.
Filter openings by audit scope not just title
Job titles vary widely: 'IT auditor,' 'information systems auditor,' and 'technology risk analyst' often describe the same role. Search by scope keywords like 'SOX ITGC,' 'access controls,' or 'cloud audit' to surface relevant openings your title search would miss.
Prepare a controls testing walkthrough story
Interviewers for it audit specialist roles almost always ask you to walk through a control you tested end-to-end. Prepare one example that covers scope, evidence gathered, exception found or not found, and how you documented the conclusion in your workpapers.
Negotiate start date around busy audit cycles
Many audit teams are underwater during year-end SOX testing or regulatory exam seasons. If you're negotiating timing, ask about their current cycle. Offering a start date that avoids their peak crunch signals awareness of how the work actually runs.
IT Audit Specialist Jobs: Frequently Asked Questions
Which companies are hiring the most it audit specialists?
Baker Tilly Canada, Block, and Grant Thornton are hiring the most it audit specialists right now, with openings concentrated in Texas, California, and New York, based on current listings on Migrate Mate as of November 2026. Financial services firms, Big Four accounting practices, and large healthcare systems consistently account for a significant share of posted openings.
How many it audit specialist jobs are remote?
About 81% of it audit specialist openings are fully remote or hybrid as of November 2026, though the share varies by employer type. Roles focused on SOX compliance documentation, control design review, and policy work tend to be the most remote-friendly, while positions requiring on-site systems walkthroughs or data center access are more likely to require in-person presence.
How do you become an it audit specialist?
Start with a bachelor's degree in accounting, information systems, or a related field, then pursue entry-level audit or IT roles that expose you to internal controls testing. Earning the CISA certification from ISACA strengthens your candidacy significantly. Building hands-on experience with SOX ITGC testing, control documentation, and audit workpapers prepares you for specialist-level responsibilities.
Can you get hired as an it audit specialist with little experience?
Yes, some employers hire candidates into junior it audit specialist roles with one to two years of general audit or IT experience, particularly at larger firms with structured training programs. Focusing your application on roles that mention 'associate,' 'staff,' or 'junior' in the title, and earning a CISA or CompTIA certification before applying, meaningfully improves your chances over candidates without credentials.
What does the it audit specialist interview process look like?
Most it audit specialist interviews run in multiple stages. An initial call with a recruiter or HR contact covers your background and certification status. A technical interview follows, where you walk through a past audit engagement, explain how you tested specific controls, and discuss frameworks like COBIT or NIST. Final rounds often include a panel with audit management and a written or scenario-based exercise.
Where can I find and apply to it audit specialist jobs?
You can find and apply to it audit specialist jobs on Migrate Mate, which lists current openings from across the United States. Search for roles that match your experience level and specialization, then apply directly to each listing that fits.
See All 140+ IT Audit Specialist Jobs
Find roles that match your experience and apply in just a few clicks.
Find IT Audit Specialist Jobs