Internal Auditor

About the role

Reporting to: VP, Internal Audit and Senior Manager IT Audit

Position Summary

The Internal Auditor is responsible for identifying, assessing, and evaluating business, financial, operational, and information technology risks across the organization. The role supports the Internal Audit function through the execution of risk-based audits, SOX compliance testing, and advisory engagements covering both business process controls and IT controls.

This position requires a versatile audit professional who is comfortable working across financial, operational, and technology environments. The successful candidate will evaluate the effectiveness of internal controls, identify opportunities for process improvement, support risk management initiatives, and collaborate with business and IT stakeholders to strengthen the organization's control environment.

Key Responsibilities

• Execute risk-based internal audits covering operational, financial, compliance, and technology processes.
• Assist in identifying and assessing enterprise risks and evaluating the adequacy of mitigating controls.
• Support the development and execution of the annual internal audit plan.
• Evaluate the effectiveness of internal controls and compliance with company policies, regulatory requirements, and established frameworks.
• Prepare audit programs, testing methodologies, and working papers in accordance with Internal Audit Standards.
• Document audit findings, assess root causes, and develop practical recommendations for management.
• Prepare audit reports and communicate results to management.
• Monitor management action plans and perform remediation validation testing.
• Conduct special reviews, investigations, and ad hoc risk assessments as required.
• Support fraud risk assessments and the evaluation of anti-fraud controls.

Business Process and SOX Controls

• Perform annual SOX testing of Internal Control over Financial Reporting (ICOFR).
• Evaluate business process controls across key financial cycles including:
• Order-to-Cash
• Procure-to-Pay
• Inventory and Manufacturing
• Financial Close and Reporting
• Payroll
• Treasury
• Assess design and operating effectiveness of manual controls supporting business processes.
• Review process narratives and maintain risk and control matrices, and control documentation.
• Ensure controls remain current, effective, auditable, and aligned with organizational objectives.
• Support external audit requirements related to control testing and compliance.

IT Audit and Technology Risk

• Perform testing of IT General Controls (ITGCs), IT Application Controls (ITACs), and Information Used in Controls (IUCs).
• Execute audits of technology processes including:
• User access management
• Change management
• IT operations
• System development and implementation
• Cybersecurity and data protection controls
• Evaluate ERP systems, interfaces, integrations, and automated controls.
• Assess risks associated with new system implementations and business transformation projects.
• Review IT governance, risk management, and control frameworks.
• Support management in identifying and remediating IT control deficiencies.
• Collaborate with internal and external auditors on technology-related audits and compliance requirements.

Qualifications

Education

• Bachelor's degree in Accounting, Finance, Information Systems, Business Administration, Risk Management, or a related discipline.
• Professional designation preferred:
• CPA
• CIA
• CISA
• CRISC
• Equivalent professional certification

Experience

• 3 to 7 years of experience in Internal Audit, Risk Management, SOX Compliance, IT Audit, Public Accounting, or a related field.
• Experience testing both business process controls and IT controls.
• Strong knowledge of SOX, COSO, risk assessment methodologies, and internal control frameworks.
• Experience with ERP environments such as SAP, Oracle, Microsoft Dynamics, or similar systems.
• Experience supporting remediation activities and follow-up testing.
• Public accounting or consulting experience is considered an asset.

Knowledge, Skills, and Abilities

• Strong understanding of internal control principles and risk management practices.
• Knowledge of SOX, COSO, ITGC, ITAC, and Information Used in Controls (IUCs).
• Ability to evaluate both manual and automated control environments.
• Excellent analytical, problem-solving, and critical thinking skills.
• Strong verbal, written, and presentation skills.
• Ability to build relationships and influence stakeholders across business and IT functions.
• Strong documentation and report-writing skills.
• Ability to manage multiple projects and meet deadlines.
• Advanced Microsoft Excel and Office skills.
• Experience using Optro/ AuditBoard or other audit management software is an asset.
• Ability to work independently with minimal supervision.

Working Conditions

• Office environment with regular computer-based work.
• Periodic travel to operating locations as required (10-20%).
• Interaction with business, finance, operations, and IT teams across the organization.

Additional information

Please note: CompoSecure does not accept unsolicited resumes from staffing agencies or third-party recruiters. Any unsolicited resumes sent to CompoSecure, including to our employees, will become the property of CompoSecure and may be used without any obligation to pay referral or placement fees. Any agency or recruiter seeking to work with CompoSecure's Talent Acquisition Team should contact our team directly by sending an email to.

Pay and benefits

CompoSecure offers competitive compensation, comprehensive benefits, and the opportunity to work alongside a team of dedicated professionals who are shaping the future of financial technology.

Pay Range $88,000.00 - $140,800.00 Annual

Offers will be negotiated based on each candidate's qualifications.

Incentive Compensation

This role may be eligible to participate in our annual or quarterly incentive plan. Incentives are earned based on employee performance against defined metrics and company goals.

Benefits

Full-time employees are eligible for our comprehensive benefits program which includes Group Healthcare, Dental, Vision, Flexible Spending Account, Group Term Life Insurance, and 401(k) retirement plan. You will be eligible to participate in benefits on the first day of the month after your hire date.