Fast Facts

McGraw Hill is seeking a Senior IT Auditor to plan, execute, and report on IT audit projects, ensuring compliance with regulatory standards and enhancing organizational processes in a fully remote role within the United States.

Responsibilities: Primary responsibilities include conducting IT audits, evaluating controls for financial reporting, collaborating with stakeholders, and preparing audit reports summarizing findings and recommendations.

Skills: Ideal candidates must have a strong understanding of IT governance, risk management, financial reporting requirements, and extensive experience with audit tools and data analytics techniques.

Qualifications: Preferred qualifications include 3-4 years of technology audit experience and knowledge of risk standards and frameworks like SOX, COSO, and COBIT.

Location: This is a remote position open to applicants authorized to work in the United States.

Compensation: $71300 - $112000 / Annually

Overview

Build the Future

At McGraw Hill, we are dedicated to delivering digital learning experiences that transform education for learners and educators. Our focus is on creating seamless, impactful products that truly benefit our users while supporting growth and collaboration across teams. We foster a culture that values innovation, teamwork, and a balance between career growth and personal well-being.

How can you make an impact?

The IT Audit Senior at McGraw Hill is a newly created hands-on audit role reporting directly to the Director, IT Internal Audit. The Senior IT Auditor is responsible for planning, executing, and reporting on IT audit projects to evaluate the effectiveness of the organization’s IT controls, systems, and processes. This role requires a strong understanding of IT governance, risk management, and compliance frameworks, with a particular emphasis on financial reporting and external audit requirements. The Senior IT Auditor will collaborate with cross-functional teams to ensure compliance with regulatory standards and identify opportunities for process improvement

This is a remote position open to applicants authorized to work for any employer within the United States.

What You’ll Do:

• Plan and conduct IT audits, including risk assessments, control testing, and reporting, in alignment with audit standards and organizational objectives for financial statements reporting.
• Evaluate the design and operating effectiveness of IT general controls (ITGCs) and application controls as part of financial statement reporting compliance.
• Perform detailed testing of IT systems, processes, and controls to ensure compliance with external audit requirements.
• Collaborate with business and IT stakeholders to identify and remediate control deficiencies, ensuring timely resolution. Working with external audit to address their audit requirements and teams. 
• Assess IT risks related to system changes, data security, access management, and disaster recovery as needed. Prepare clear and concise audit reports, summarizing findings, risks, and recommendations for management.
• Stay updated on emerging IT risks, regulatory changes, and industry best practices to enhance audit processes.
• Build and maintain ongoing, trusted relationships with IT and Finance stakeholders, liase with external auditors on projects and requirements, and oversee co-sourcers and any subject matter experts utilized on projects.
• Stay current with evolving audit, industry, technology and regulatory trends/changes, and incorporate accordingly into audit process
• Carry out special projects and post-mortems as needed

What you bring:

• Minimum 3-4 years technology audit experience (internal or external)
• Strong technical knowledge of technology risks, controls, and processes
• Strong knowledge of financial reporting requirements, ITGCs, and application controls.
• Extensive experience with audit tools, sampling and applying data analytics techniques during projects (WDesk, AuditBoard, Tableau, etc)
• Critical and strategic thinker with ability to understand new areas and processes quickly, distill risks, problem solve, flex, and recommend practical and effective. Ability to follow through and deliver while juggling multiple and competing priorities
• Knowledge of common risk standards and frameworks, such as Sarbanes-Oxley Act (SOX), COSO, COBIT, NIST, PCAOB, SOC-1, SOC-2, The Institute of Internal Auditors (IIA’s) code of ethics, and related technology frameworks, etc
• Technical knowledge of ITGCs, ITACs, financial and customer-facing applications, deployments, interfaces, data management, cloud governance and information security and privacy. Awareness and knowledge of emerging and other technologies such as RPA, process mining, LLMs/AI

Why work for us?

The work you do at McGraw Hill will be work that matters. We are collectively designing content that will build the future of education. Play your part and experience a sense of fulfilment that will inspire you to even greater heights.

The pay range for this position is between $71,300-$112,000 annually, however, base pay offered may vary depending on job-related knowledge, skills, experience, and location. Click here to learn more about our benefit offerings.

McGraw Hill recruiters always use a “@mheducation.com” email address and/or from our Applicant Tracking System, iCIMS. Any variation of this email domain should be considered suspicious. Additionally, McGraw Hill recruiters and authorized representatives will never request sensitive information in email.

49189