IT Audit Lead

About this role

Internal Audit, at Sportradar, gives independent assurance and advice across the group and uses technology to change how audit work gets done. You will report to the Director of IT Internal Audit and own IT Application Controls (ITAC) testing for our SOx programme. About two thirds of the role covers ITACs, interfaces, key reports and IPE across in-scope applications. The remaining third covers IT General Controls (ITGCs).

You will also help build the AI agents and automation that the function uses in its testing. You will work directly with finance, engineering and IT teams. You will also be the main ITGC/ITAC contact for our external auditors. The role requires approximately 10% international travel. THE CHALLENGE: IT Application Controls Identify, document and test automated controls, calculations, system configurations and interfaces for design and operating effectiveness.

Test key reports and Information Produced by the Entity (IPE) for completeness and accuracy, including reports built on custom code or data platforms. In consultation with key finance and engineering teams, assess the ITAC impact of new systems, upgrades and major changes, and make sure management have identified relevant risks and controls are in place, before go-live. Work with the business process SOx team to map data flows from source systems and confirm where automated controls provide coverage.

Review SOC 1 reports for in-scope service providers, evaluate exceptions and review Complementary User Entity Controls (CUECs). IT General Controls Test ITGCs over access management, change management (including CI/CD pipelines and cloud environments) and IT operations for in-scope applications and supporting infrastructure. Agree remediation plans with control owners and monitor deficiencies to closure. Automation and AI Design and build AI agents for automation of audit tasks such as evidence review, population testing and control documentation.

Use data analytics to move from sample testing to full-population testing where the data allows. ABOUT YOU: 6+ years in IT audit or IT SOx, from a Big Four firm or in-house at a US-listed company, with substantial hands-on ITAC testing experience. CISA, or working towards it. CIA, ACA or ACCA are welcome in addition. Able to assess an automated control by reviewing its configuration, logic or code, not only through walkthroughs.