Senior IT Auditor - SOX Compliance & Risk Management

Sr Auditor

About us: 

Target is an iconic brand, a Fortune 50 company and one of America’s leading retailers. 

Right on pace with Target’s distinctive retail brand, in a role in Target Finance and Accounting, you will be a truly collaborative partner with a seat at the table. You’ll bring your unique point of view, experience and passion for the work to your team and internal clients. In Finance, you’ll be an integral voice in discussions that lead to Target’s unparalleled shopping experience. Your analysis and recommendations will be directly applied to critical business decisions, from sales to merchandising and beyond. Within Finance, you’ll enjoy the interesting challenges of the competitive retail space. You’ll see your contributions come to life in virtually every area of this dynamic enterprise. And you’ll grow and be challenged in your career while having a healthy balance with life outside of work. 

Internal Audit provides independent assurance and risk insights to and collaborates with business owners across the enterprise. You’ll use professional judgment, analytics, agile concepts and other innovations daily. You’ll understand, assess the effectiveness of and help improve risk management capabilities (e.g., processes and controls) for Target’s strategic, business and compliance objectives. 

Roles & Responsibilities:

As a Senior Auditor, you will be a part of the Internal Audit team and responsible for: 

• Demonstrating strong expertise in IT risk and control frameworks, including Information Security
• Performing testing and reporting on internal controls in compliance with Sarbanes-Oxley Act (SOX) and Internal Controls over Financial Reporting (ICoFR).

• Performing design and operating effectiveness testing of IT General Controls including Change Management, Identity & Access Management, Backup & Recovery, Incident & Problem Management, Batch Job Processing, SDLC, Business Continuity & Disaster Recovery.
• Performing design & operating effectiveness testing of IT Application Controls including Scenario-based testing and sampling, Source code and interface control reviews, Review of IPE (Information Produced by the Entity), Key report validation across enterprise applications
• Participating in process walkthroughs with control owners, second-line teams, and external auditors; document process understanding and develop detailed test procedures.
• Performing internal audits covering IT infrastructure and information security in line with Internal Audit policies and standards and developing a strong understanding of the organization’s risk management framework, information security policies, and control procedures.
• Communicating any findings noted during the testing and working with the internal audit auditors, 2nd line team, control owners & external auditors to assess the impact of the findings.
• Maintaining high-quality audit execution, including timely delivery and adherence to documentation and quality standards.
• Building and managing relationships with internal stakeholders and external auditors to align on timelines, expectations, and deliverables.
• Identifying opportunities to enhance audit efficiency through data analytics and automation.
• Contributing to the optimization of controls testing processes for enhancing efficiency and transparency.
• Taking ownership of professional development through proactive learning, stretch assignments, and cross-functional exposure.

Job duties may change at any time due to business needs.

About You.

• Bachelor’s/ Master’s (3 or 4 years) in Computer Science, Information Technology, or a related field.
• 6–8 years of experience in internal or external audit with a high focus on SOX compliance.
• Strong hands-on experience in auditing IT General Controls (ITGC)
• Experience of handling IT Application Controls (ITAC) (preferred).
• Experience with SAP IT controls, including SAP security design, baseline controls, and leading practices (preferred).
• Good understanding of IT risk management frameworks and standards such as SOX, COBIT, SSAE 18 / ISAE 3402.
• Working knowledge of security controls across applications, operating systems, and databases.
• Experience with enterprise systems and ERP platforms.
• Strong analytical thinking and problem-solving skills, with the ability to work independently and drive outcomes.
• Demonstrates initiative, ownership, and a high level of professionalism in a fast-paced environment.

Preferences: 

• CISA, CISSP, CISM, ITIL, CIA, CCNA, CCSK, ISO27001 Lead Auditor 
• Big 4 Consulting experience
• Retail Industry experience.

Experience Level

Senior Level