Senior Internal Auditor, Audit & Compliance

About Xerox Holdings Corporation For more than 100 years, Xerox has continually redefined the workplace experience. Harnessing our leadership position in office and production print technology, we’ve expanded into software and services to sustainably power the hybrid workplace of today and tomorrow. Today, Xerox is continuing its legacy of innovation to deliver client-centric and digitally-driven technology solutions and meet the needs of today’s global, distributed workforce. From the office to industrial environments, our differentiated business and technology offerings and financial services are essential workplace technology solutions that drive success for our clients. At Xerox, we make work, work. Learn more about us at www.xerox.com (http://www.xerox.com/) .

The Senior Internal Auditor leads and executes risk-based audits across IT, operational and financial areas from planning through reporting. Audit effort is focused on the areas of highest risk to the business: the role evaluates whether key risks are identified, managed and controlled effectively, and communicates risk-rated findings to management. Contributes to the annual risk assessment and audit plan.

Key responsibilities

Audit execution (all areas)

- Plan, execute and report on risk-based audits in line with the IIA Global Internal Audit Standards.
- Perform engagement-level risk assessments to identify key business, IT and fraud risks, then set scope, objectives and audit programs around the highest-risk areas.
- Perform walkthroughs and test controls that mitigate the key risks, with testing depth and sample sizes driven by risk rating, and document workpapers, issues and action plans in Workiva.
- Use AI and data analytics (e.g., generative AI assistants, machine learning, SQL, Power BI, Python) across the audit lifecycle: risk assessment, full-population testing, anomaly detection, document review and report drafting. Validate AI outputs and follow company policy on confidential data.
- Draft clear, concise findings rated by risk severity and likelihood, with root cause, business impact and practical recommendations.
- Agree management action plans and track remediation through to validation and closure.

IT audits

- Plan and execute risk-based IT audits focused on emerging and high-impact technology risks facing the business (for example, cybersecurity, AI and data governance).
- Assess how technology risks are governed, managed and controlled, and how well the organization is positioned against new and evolving threats.
- Evaluate technology areas against relevant industry frameworks, standards and regulations.
- Monitor the changing technology and regulatory landscape and recommend new IT audit topics for the audit plan.

Operational audits

- Assess efficiency and effectiveness of business processes such as procurement, supply chain, sales, HR and payroll, and customer service.
- Identify control gaps, process inefficiencies and cost-saving opportunities.
- Evaluate compliance with company policies, contracts and applicable regulations.

Financial audits

- Audit financial processes and controls, including order-to-cash, procure-to-pay, record-to-report, treasury and tax.
- Review account reconciliations, journal entries, revenue recognition and period-end close.
- Assess the accuracy of financial data, the safeguarding of assets and compliance with accounting policies.

Leadership and stakeholder management

- Lead fieldwork day to day and supervise, coach and review the work of staff auditors and co-sourced resources.
- Build strong relationships with process owners and present results to senior management.
- Contribute to the enterprise-wide risk assessment, the risk-based annual audit plan, ongoing monitoring of emerging risks, fraud investigations and special projects requested by management or the Audit Committee.

Required qualifications

- Bachelor's degree in Accounting, Finance, Information Systems, Business or a related field.
- 3 to 5 years of progressive experience in internal audit, external audit (Big 4 preferred) or risk advisory.
- Hands-on experience applying a risk-based audit methodology across IT, operational and financial audits, including audits of emerging technology risks.
- Working knowledge of the COSO Internal Control and COSO ERM frameworks, IIA Standards, and relevant technology risk frameworks (e.g., NIST, ISO, COBIT).
- CISA or CIA certification (or actively pursuing).
- Experience with ERP environments (SAP, Oracle or similar) and audit management platforms, preferably Workiva.
- Strong written and verbal communication skills, including drafting audit reports for senior management.
- Proficiency in Excel and data analytics tools, and practical experience using AI tools responsibly in audit work.

Preferred qualifications

- Experience at a global, publicly listed company with multi-country audit coverage.
- Exposure to cloud platforms (AWS, Azure).
- Experience with fraud investigations or forensic accounting.
- Advanced analytics, automation or AI skills (SQL, Python, Power BI, Alteryx, RPA, generative AI and prompt design), and advanced Workiva use or certification.
- Additional languages, for international audit assignments.