It Risk Management Jobs in Massachusetts (NOW HIRING)

*This is a hybrid role with a 50% on-site requirement in Wilmington, MA*

The IT Internal Auditor supports the execution of the Company's Internal Audit plan, with responsibilities covering Sarbanes-Oxley (SOX) IT General Controls (ITGC) testing, IT operational audits, IT compliance audits, and system development life cycle (SDLC) assessments. This role evaluates the design and operating effectiveness of technology controls, identifies opportunities to strengthen governance and risk management practices, and helps enhance the overall control environment.

Working closely with Internal Audit leadership, business stakeholders, technology teams, and external auditors, the IT Internal Auditor participates in all phases of the audit cycle, including planning, risk assessment, fieldwork/testing, reporting, and follow-up activities. The position supports the assessment of risks related to information technology, cybersecurity, system implementations, cloud-based environments, third-party service providers, regulatory compliance, and technology-enabled business processes.

The successful candidate will apply analytical and problem-solving skills to assess controls, document test procedures and results, communicate observations and recommendations, and contribute to continuous improvement initiatives within the Internal Audit function. This role offers significant exposure to business and IT operations while providing opportunities for professional growth and development.

Responsibilities: 

• Support the Company's ongoing compliance with the Sarbanes-Oxley Act (SOX) by participating in scoping, planning, walkthroughs, control testing, issue tracking, status reporting, and coordination with external auditors

• Execute SOX IT General Controls (ITGC) testing, including assessments of user access management, change management, computer operations, logical security, and other key technology controls

• Assist in evaluating the design and operating effectiveness of IT controls and identifying opportunities to strengthen the 

  Company's control environment, risk management practices, and operational effectiveness.

• Support audits and assessments of technology-related risks, including cybersecurity, cloud computing, third-party service providers, data governance, and other emerging technology risks, as assigned.

• Participate in System Development Life Cycle (SDLC) reviews and system implementation assessments to evaluate project governance, change management, testing, security, and overall control effectiveness.

• Execute audit procedures in accordance with established audit programs, methodologies, and professional standards, while preparing clear, well-organized, and comprehensive audit workpapers.

• Analyze audit results, identify control deficiencies and process improvement opportunities, and assist in developing practical, value-added recommendations

• Assist in the preparation of Internal Audit reports, including documenting audit scope, objectives, observations, risk assessments, recommendations, and management action plans
• Collaborate with IT and business stakeholders to obtain information, discuss audit results, validate findings, and monitor remediation efforts.
• Maintain a working knowledge of Internal Audit methodologies, professional standards, regulatory requirements, and industry best practices.
• Exceptional organizational skills and ability to manage time effectively and efficiently to ensure assigned work is completed within established time frames
• Contribute to departmental initiatives, training programs, knowledge-sharing activities, and continuous improvement efforts designed to enhance the effectiveness and maturity of the Internal Audit function
• Perform other audit-related responsibilities, special projects, and ad hoc reviews as assigned
   

Requirements: 

• 1-3 years of experience in IT Audit, Internal Audit, SOX compliance, public accounting, IT risk management, IT compliance, cybersecurity, or a related internal controls function
• Foundational knowledge of IT General Controls (ITGCs), including user access management, change management, computer operations, and logical security controls.
• Exposure to IT operational audits, IT compliance assessments, system development life cycle (SDLC) processes, application controls, or technology risk management is preferred
• Demonstrated commitment to professional development, including pursuit of relevant certifications such as Certified Information Systems Auditor (CISA) or Certified Internal Auditor (CIA)
• Experience with Optro (formerly AuditBoard) or other audit management software is a plus
• Strong verbal and written communication skills, with the ability to effectively document audit procedures, communicate observations, and interact with stakeholders across all levels of the organization 
• Strong analytical, critical thinking, and problem-solving skills with a high degree of attention to detail and professional skepticism
• Self-motivated and results-oriented, with the ability to manage multiple priorities, meet deadlines, and deliver high-quality work in a fast-paced environment with limited supervision 
• Collaborative team partner who contributes to a positive and inclusive work environment and demonstrates the ability to build effective working relationships with diverse stakeholders 
• Proficient with Microsoft Office applications (Excel, PowerPoint, Outlook, Word) and comfortable learning and using technology
• Willingness and ability to travel up to 15% as required. 
• Ability to handle sensitive and confidential information with the highest level of integrity, professionalism, and discretion.

Education:

• Bachelor's degree in Information Systems, Information Technology, Computer Science, Cybersecurity, Computer Engineering, Management Information Systems (MIS), Accounting, Finance, or a related field.
• Relevant professional certifications, including Certified Information Systems Auditor (CISA), Certified Internal Auditor (CIA), Certified Public Accountant (CPA), or Certified Information Systems Security Professional (CISSP), are preferred or expected to be pursued based on experience level.
   

The estimated compensation for this position ranges from $74,000-$104,000. This range reflects various factors, including but not limited to the applicant's skills, qualifications, and previous work experience. Additionally, geographic differentials may apply based on the location where the position is ultimately filled, which could affect the final compensation. Please note that there is no application deadline for this role, and the recruitment process will continue until the position is filled.

Benefits & Perks:

401K with Company Match, Profit Sharing, Health Insurance, Employee Assistance Program, Life Insurance, Paid Time Off, Tuition Reimbursement, 30% Employee Discount, Employee Referral Bonuses.

UniFirst is an international leader in garment & Uniform services industry. We currently employ over 14,000 team partners who serve 300,000 business customer locations throughout the U.S., Canada, and Europe.

We were included in the top 10 of Selling Power magazine's "Best Companies to Sell For" list and recognized on Forbes magazine's "Platinum 400 - Best Big Companies" list. As an 80-year old company focused on annual growth, there's never been a better time to join our team.