Senior Internal IT Auditor - GXO Enterprise Services LLC

At GXO, we're constantly looking for talented individuals at all levels who can deliver the caliber of service our company requires. You know that a positive work environment creates happy employees, which boosts productivity and dedication. On our team, you'll have the support to excel at work and the resources to build a career you can be proud of.

The Senior Internal IT Auditor is responsible for SOC 1 compliance including maintaining good client relationships and coordinating with external audit firms. This position will support IT audit execution by assisting in audit scoping, performing audit fieldwork, and preparing detailed documentation. The Senior Internal IT Auditor requires strong project management, problem-solving, and communication skills, along with experience in IT audits.

**This role is hybrid in either Greenwich, CT or High Point, NC**

Pay, benefits and more.

We are eager to attract the best, so we offer competitive compensation and a generous benefits package, including full health insurance (medical, dental and vision), 401(k), life insurance, disability, and the opportunity to participate in a company incentive plan.

What you'll do on a typical day:

As the Senior IT Auditor, you will be responsible for scoping, conducting, and documenting IT Audits.

• SOC 1 Compliance:
  • Manage the entire SOC 1 reporting project for multiple key clients, maintaining strong site/client relationships, and coordinating with external audit firms.
  • Demonstrate an excellent understanding of SOC 1, Type 2 concepts and their application within the organization's internal controls framework.
  • Perform site visits, alongside the external audit firms, and assist the site managers during the SOC 1 audit walkthroughs, on an ad hoc basis.
• IT Audit Execution:
  • Perform and document audit fieldwork in accordance with applicable guidance as per GXO's Internal Audit Charter.
  • Gather and prepare detailed documentation of audit activities to support conclusions reached, ensuring compliance with audit methodology. Documentation includes audit planning documents, test plans, workpapers, draft reports, and formal audit reports.
  • Identify weaknesses in control design and effectiveness to provide actionable remediation recommendations.

At a minimum, you'll need:

• Bachelor's Degree or equivalent related work.
• 4 years of IT audit (internal/external) experience or relevant business experience.
• Experience in conducting IT internal audit projects.
• Experience in the SOC 1 process and controls.
• Experience in identifying risks/controls, performing process walkthroughs, testing for key controls, monitoring effectiveness, and reporting results.
• Ability to work and adapt in fast-paced environment.
• Ability to travel: 20% of the time.

• Prior Big4 accounting experience.
• CIA, CISA, or equivalent certification.
• Knowledge of key IT risk area such as cloud, cybersecurity (including vulnerability assessment, penetration testing, data encryption), BPC/DRP, and IT General Controls (ITGC).
• Understanding of key business processes such as P2P, O2C, and inventory/warehouse management.

#LI-AR2

GXO is a leading provider of cutting-edge supply chain solutions to the most successful companies in the world. We help our customers manage their goods most efficiently using our technology and services. Our greatest strength is our global team - energetic, innovative people of all experience levels and talents who make GXO a great place to work.

We are proud to be an Equal Opportunity/Affirmative Action employer. Qualified applicants will receive consideration for employment without regard to race, sex, disability, veteran or other protected status.

GXO adheres to CDC, OSHA and state and local requirements regarding COVID safety. All employees and visitors are expected to comply with GXO policies which are in place to safeguard our employees and customers.

All applicants who receive a conditional offer of employment may be required to take and pass a pre-employment drug test.

The above statements are intended to describe the general nature and level of work being performed by people assigned to this classification. They are not intended to be construed as an exhaustive list of all responsibilities, duties and skills required of personnel so classified. All employees may be required to perform duties outside of their normal responsibilities from time to time, as needed. Review GXO's candidate privacy statement here.