Sr. IT Auditor

Job Description

This position is designed for a self-motivated professional with strong knowledge of IT general controls and the capability to test automated controls. The individual will primarily support integrated audits as a senior contributor, independently lead assigned technology audit workstreams, and translate system and control matters into clear business risks and practical insights. The individual may also support general audits based on audit-plan and business needs.

Key Responsibilities:

Project Delivery & Technical Capabilities

• Apply risk-based thinking to identify, prioritize, and clearly articulate significant technology and business risks.
• Independently plan and execute assigned audit workstreams, applying sound judgment to risk assessment, scope, testing, analysis, and communication of results.
• Evaluate the design and operating effectiveness of IT general controls and automated controls relevant to the audit objectives and scope.
• Use data analytics, automation, and approved AI-enabled tools to improve audit coverage, efficiency, documentation quality, and insight generation while complying with Lenovo requirements for security, confidentiality, responsible AI, and professional judgment
• Prepare accurate, complete, and review-ready workpapers that support clear, evidence-based conclusions. Complete assigned work within agreed milestones and promptly escalate significant quality, scope, evidence, or timeline concerns.
• Contribute to ongoing scope assessment and raise significant changes in risk or circumstances for timely consideration by the project manager.
• Support integrated audits by applying IT general controls and automated control testing expertise in the context of the relevant business processes and audit objectives.

Communication & Collaboration

• Communicate technical risks clearly, concisely, and in business-relevant language to audit leaders, process owners, and technology stakeholders.
• Lead walkthroughs, testing discussions, and result-alignment meetings for assigned workstreams. Present relevant facts objectively and escalate concerns in a timely manner.
• Build trusted working relationships across functions, geographies, and cultures while maintaining independence, professional skepticism, confidentiality, and respect.
• Collaborate effectively with general audit, technical audit, data enablement, subject-matter experts, external audit, and co-source specialists to deliver integrated assurance.
• Contribute ideas, reusable approaches, and lessons learned that improve audit quality, innovation, and scale.

Business Acumen

• Develop a practical understanding of Lenovo's strategy, Hybrid AI priorities, operating model, products, services, enterprise systems, and major transformation initiatives relevant to assigned audits.
• Connect technology risks and controls to business outcomes such as resilience, security, regulatory compliance, data integrity, customer trust, operational efficiency, financial reporting, and strategic execution.
• Consider enterprise risk, company strategy, stakeholder perspectives, prior audit results, data insights, and external developments when assessing significance and tailoring audit work.
• Recommend pragmatic and sustainable improvements that address underlying risks and reflect cost, complexity, and business value.

Contribution / Leadership

• Take ownership of assigned workstreams from planning through reporting and follow-up, with limited supervision.
• Demonstrate readiness to lead defined phases or smaller engagements when assigned, including coordinating work, tracking milestones, and maintaining quality.
• Coach less experienced auditors on IT general controls, automated control testing, documentation, and use of audit tools.
• Actively pursue continuous learning in enterprise systems, technology controls, automated control testing, Lenovo's business, and internal audit practices. Apply learning to improve current work and share it with others.
• Model Lenovo values, applicable professional standards, ethical behavior, objectivity, and accountability.

Basic Qualifications:

• University degree in Information Systems, Computer Science, Information Systems, Accounting, Finance, Business, or a related discipline.
• 3+ years of relevant experience in internal audit, external audit, IT audit, IT controls, automated control testing, or a related field. Big Four experience is preferred.
• Must be able to come into the office x3 a week (Morrisville, North Carolina)

Preferred Qualifications:

• Strong knowledge of IT general controls and demonstrated capability to test automated controls and system-generated information used in business processes.
• Experience with enterprise platforms such as SAP S/4HANA, SAP BPC, cloud platforms, identity and access management tools, or other major business systems is preferred.
• Experience using data analytics and visualization tools such as Power BI, Excel, SQL, Python, or comparable tools is preferred. Experience responsibly using AI tools is also preferred.
• Flexibility to support general and integrated audits across business areas such as sales, marketing, procurement, supply chain, finance, and human resources, applying risk-based audit skills beyond technology-specific reviews.
• Strong analytical, problem-solving, writing, presentation, and stakeholder-management skills. Ability to explain technical matters to non-technical audiences is required.
• Experience in a global, matrixed, high-technology, manufacturing, services, telecommunications, or similarly complex environment is preferred.
• Fluency in English, including writing, speaking, and reading, is required. Additional language capability is preferred based on location and audit coverage.
• Ability to travel approximately 20%, subject to business needs.
• Preferred certifications include CISA, CISSP, CISM, CIA, CPA/ACCA, CFE, or equivalent credentials relevant to IT audit and integrated assurance.

We are an Equal Opportunity Employer and do not discriminate against any employee or applicant for employment because of race, color, sex, age, religion, sexual orientation, gender identity, national origin, status as a veteran, and basis of disability or any federal, state, or local protected class.