Senior Internal Auditor (SOX and IT Audit)

What you'll do

AfterQuery wants working internal auditors to run complete audit assignments that are then used to train and evaluate AI models. You request and review evidence, reconcile populations, test controls and document exceptions, building testing workbooks in Excel and writing findings memos with record-level citations.

The hard part is judgment, not volume: you separate a confirmed control failure from evidence that is merely missing or insufficient, and explain each conclusion. You also review other audit tasks for accuracy, evidence sufficiency, expected answers and grading criteria. If you have ever argued over whether an exception is real or just undocumented, this is that skill, used as the product.

Who qualifies

• 5+ years of hands-on internal audit or SOX controls testing that you executed yourself (in-house internal audit, SOX or internal IT audit); reviewing other people's work does not count
• Direct testing experience in at least one of: vendor management and payment approvals, payroll and compensation changes, or user access and termination controls
• Strong Excel: 10,000+ row datasets, joining exports across systems, resolving duplicate identities, testing effective dates and approval limits, and formula-driven workbooks that update when inputs change
• A bachelor's degree in accounting, finance, information systems or a related field
• Availability of 20 to 40 hours per week

Preferred: a CIA, CPA or CISA; coverage of more than one of the three areas above; and SOX 404 / ICFR testing at a public company or bank, or in a risk advisory or SOX consulting practice where you did the testing yourself. The application form asks for your CPA status, optionally. No prior AI experience is needed.

What it pays

The board shows $80/hr as an independent contractor. The ad states no range, so that is the figure we record. The ad does not publish its payment terms.

Worth knowing

Good:

• Hourly rate that reflects senior audit experience, for work you already know how to do
• Remote and flexible, with a stated 20 to 40 hours per week
• Real audit evidence and workbooks rather than abstract question writing
• Backed by a YC startup, and no AI background is required

Less good:

• The experience bar is specific: self-executed testing, not oversight, and Excel at scale is expected
• It is a contract role with no stated benefits
• Payment terms are not published on this listing

About this listing

Read from the AfterQuery Experts board on 18 October 2026; the role was posted on 19 October 2026. The ad does not describe its hiring steps. AfterQuery's help centre describes an unpaid one-attempt assessment and identity verification, covered on the company page. See AfterQuery.