IT Internal Audit Manager

Responsibilities

• Lead end-to-end IT audits with primary focus on IT General Controls (access management, change management, IT operations, logical security, backup/recovery, and related domains)
• Evaluate execute software development lifecycle controls across the full lifecycle (requirements, design, development, testing, deployment, maintenance), in modern delivery environments
• Design and execute risk-based audit programs covering application controls, infrastructure, cloud environments, data integrity, and system implementations
• Perform and oversee SOX 404 ITGC testing and related walkthroughs; assess control design and operating effectiveness
• Identify control gaps, root causes, and emerging technology risks; develop practical, risk-ranked recommendations and track remediation to closure
• Collaborate with process owners and engineers to strengthen the control environment and provide consultative guidance on control design during system implementations and process changes
• Stay current on relevant frameworks, regulations, and technology trends (SOX, COBIT, NIST, ISO 27001, etc.) and incorporate them into audit approaches
• Support special projects, investigations, and continuous monitoring initiatives as needed
• Manage relations with external auditors to ensure deadlines are being met
• Deliver clear reporting to leadership

Requirements

• Bachelor’s degree
• 6+ years of audit experience
• 7+ years of progressive IT audit, IT risk, or IT compliance experience
• Internal audit experience from Big 4
• "Run it like you own it” mentality with the ability to thrive in a high paced, ever-changing environment
• Strong analytical problem solving and project management skills
• Public company experience (or equivalent large, complex organization experience) with strong SOX 404 ITGC testing experience
• Solid understanding of risk assessment methodologies, internal control frameworks, and audit standards (IIA, ISACA)
• Professional certifications: CISA (strongly preferred); CISSP, CIA, CISM, CRISC, or equivalent
• CPA (Certified Public Accountant)