IT Analyst - Audit, Risk, and Controls

About Nscale

Nscale is the GPU cloud engineered for AI. We provide cost-effective, high-performance infrastructure for AI

startups and large enterprise customers. Nscale enables AI-focused companies to achieve superior results by

reducing the complexity of AI development. Our GPU cloud bolsters technical capabilities and directly supports

strategic business outcomes, including cost management, rapid innovation, and environmental responsibility.

We thrive on a culture of relentless innovation, ownership, and accountability, where every team member

takes pride in their work and drives it with excellence and urgency. As an Nscaler, you'll build trust through

openness and transparency, where everyone is inspired to do their best work.

About the Role

The Analyst, Audit, Risk & Controls supports Nscale's internal control environment across IT SOX, internal

audit, business process reviews, and enterprise risk management. Working within the Finance team and

reporting to the Director, Audit, Risk & Controls, this is a hands-on role covering control design, testing,

documentation, and ongoing monitoring across both IT and business process domains.

This is a deliberately broad role. Depending on the candidate's background, the primary focus may sit closer to

IT general controls and systems, or to business process controls and financial reporting. We expect to hire

more than one person and welcome applicants from both profiles.

What You'll Be Doing

IT SOX & General Controls

Support the design, documentation, and testing of IT general controls (ITGCs) across in-scope systems

Perform walkthroughs and test design and operating effectiveness of controls covering access

management, change management, SDLC, and backup & recovery

Maintain and update ITGC documentation, control matrices, and testing workpapers

Support user access reviews, segregation of duties (SoD) assessments, and role-based access

management processes

Assist in identifying, tracking, and remediating IT control gaps and deficiencies

Contribute to system implementation reviews and ITGC scoping for new platforms entering the control

environment

Internal Audit

Support delivery of the internal audit plan across IT and business process areas, including scoping,

fieldwork, and reporting

Prepare and maintain audit workpapers, findings, and management action plans

Track and follow up on open audit recommendations and remediation progress

Assist in audit readiness activities and support coordination with external auditors on information

requests and testing

Business Process Controls

Conduct process walkthroughs and as-is documentation for key financial and operational processes

Support the design and testing of business process controls for SOX and internal audit purposes

Identify control weaknesses, process inefficiencies, and improvement opportunities

Perform internal controls impact assessments for new systems, process changes, or organisational

developments

Assist in the design and implementation of controls arising from business initiatives or transformation

projects

Enterprise Risk Management

Support the maintenance and monitoring of the risk register, including tracking of key risk indicators and

control owners

Contribute to periodic risk assessments and assist in identifying emerging risks relevant to IT, financial

reporting, and operations

Help embed risk and control awareness across the business by supporting documentation, reporting,

and stakeholder engagement

Assist in aligning control frameworks and audit findings with the broader ERM programme

Collaboration & Reporting

Work closely with control owners across Finance, IT, and Operations to gather evidence and support

control activities

Communicate control requirements and findings clearly to both technical and non-technical

stakeholders

Contribute to ARC team reporting, dashboards, and status updates for senior stakeholders

Support ad hoc risk, compliance, and controls projects as required by the ARC leadership team

What We're Looking For

Education & Experience

2.5 – 5 years of experience in IT audit, external audit, or internal audit - ideally from a Big 4 or

equivalent firm

Exposure to SOX compliance programmes, including ITGC and/or business process control testing

Experience working with ERP or enterprise systems (e.g. NetSuite, SAP, Oracle, Workday)

Familiarity with control frameworks such as COSO and COBIT

Bachelor's degree in Information Technology, Accounting, Finance, or a related field (or equivalent

experience)

Technical Skills

Working knowledge of IT general controls and their application in a SOX or internal audit context

Understanding of access management, user provisioning, and SoD concepts

Familiarity with ERP systems and financial applications

Awareness of IT audit tools, testing methodologies, and basic system security principles

Professional Skills

Strong analytical and problem-solving skills with attention to detail

Able to operate across both IT and business process domains

Clear written and verbal communication skills - comfortable presenting findings to non-technical

stakeholders

Organised and self-directed, able to manage multiple tasks in a fast-paced, high-growth environment

Collaborative and relationship-oriented, with the ability to work effectively across functions

Preferred Qualifications

Professional qualification in progress or achieved: ACA, ACCA, CISA, CIA, or equivalent

Experience with audit or compliance management platforms (e.g. Workiva, AuditBoard)

Knowledge of data governance or information security frameworks

Experience in technology, financial services, or other regulated industries

For information on how Nscale handles candidate personal data, please see our Employee & Candidate Privacy Notice: Here.