Manager, IT Internal Audit

The user wants me to reformat a job posting into clean, well-structured semantic HTML. Let me analyze the content and structure it according to the rules. Rules: - Use

for section headings (About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule) - Use

• for lists of duties/requirements/benefits - Use

  for prose - Do NOT repeat job title as heading - Do NOT put Job ID/requisition numbers as headings - Preserve ALL substantive information - Remove boilerplate (cookie/navigation/legal/EEO/equal-opportunity/scam-warning, duplicated lines, application instructions) - Include section ONLY when posting has real, specific content for it - Never emit heading followed by filler/placeholder text (e.g., "commensurate with experience", "not specified", "N/A", "varies", "TBD") - Never create Pay/Schedule/Benefits sections unless posting actually states them - Prefer few substantive sections over many thin ones - Output ONLY HTML fragment — no /, no markdown code fences Let me parse the job posting: 1. Company description/intro: "FactSet creates flexible, open data and software solutions..." - this is "About the role" or company overview 2. "Your Impact" - describes the role 3. Location: New York City, Norwalk, CT, Boston, MA (Hybrid) 4. "What You'll Do" - responsibilities broken into subsections: - IT Audit Planning & Execution - Business Audit Support - Team Leadership & Development - Stakeholder Management & Communication - Issue Management & Remediation - SOX & Compliance Support 5. "Required Skills" / "What We're Looking For" - requirements 6. "Desired Skills" - preferred qualifications 7. "What's In It For You" - benefits 8. Salary range: $128k - $160K for NYC and CT 9. Company Overview - more company info 10. EEO statement and E-Verify - boilerplate to remove I need to structure this into appropriate sections. The rules say use

  for section headings like About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. I'll create: - About the role (combining company description and "Your Impact") - Responsibilities (with subsections as lists) - Requirements (required skills) - Qualifications (desired skills) - Benefits (what's in it for you) - Pay (salary range) Location is mentioned but not a separate section heading in the rules. Could fold into About the role or a short p. Schedule: mentions "Hybrid" but not detailed schedule. Might not need separate Schedule section. Let me draft the HTML. Note: The rules say "Do NOT repeat the job title as a heading (the page already shows it)". The job title is "Manager, IT Internal Audit" but it's not explicitly in the text as a title? Actually the posting starts with "FactSet creates..." and then "Your Impact The Manager, IT Internal Audit is a key contributor...". So the title is mentioned. I should not repeat it as a heading. Also "Job ID / requisition numbers" - none present. Now, I need to preserve all substantive information. So I'll include all bullet points. For Responsibilities, I'll create a list for each subsection. Could use nested lists or separate lists under each subheading. Since the rule says use

  • for any list of duties/requirements/benefits, and

    for prose. I'll use

    for main sections, and for subsections maybe use

    ? But the rule only mentions

    for section headings. It doesn't forbid

    . However, to keep it simple, I could make each subsection a separate

    with a heading? But the rule says use

    for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule). It doesn't mention subsections. I think I should keep only top-level sections as

    . For subsections within Responsibilities, I could use or just include as part of list items. But the content has clear subcategories. I could make each subcategory a separate

    with a preceding

    Subcategory

    or use

    . Since the rule doesn't forbid

    , but says "use

    for section headings". I'll use

    for subsections to maintain structure. But the output should be a fragment. I'll include

    for main sections, and

    for subsections within Responsibilities. Alternatively, I could flatten: under Responsibilities, have a list where each item includes the subcategory. But that would lose structure. Better to keep subsections. Let me check the rules again: "use

    for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule)." It doesn't say not to use other headings. I'll use

    for subsections. Now, for Benefits: "What's In It For You" includes several bullet points. I'll list them. Pay: salary range given. Schedule: hybrid mentioned, but not detailed. Could include in About the role or a short p. Since the rule says never create Schedule section unless posting actually states them. It states "Hybrid" but not details. I'll include location and hybrid in About the role. Now, remove boilerplate: EEO statement, E-Verify, "Learn More About Our Benefits Here." link, "Learn more at www.factset.com..." etc. Also remove "Salary is just one component..." but keep the range. Also remove "Company Overview" duplicate info. Now, write HTML. Let me structure:

    About the role

    FactSet creates flexible, open data and software solutions for over 200,000 investment professionals worldwide, providing instant access to financial data and analytics that investors use to make crucial decisions. At FactSet, our values are the foundation of everything we do. They express how we act and operate, serve as a compass in our decision-making, and play a big role in how we treat each other, our clients, and our communities. We believe that the best ideas can come from anyone, anywhere, at any time, and that curiosity is the key to anticipating our clients’ needs and exceeding their expectations.

    The Manager, IT Internal Audit is a key contributor within the Internal Audit function, reporting to the Associate Director, IT Internal Audit. This role is responsible for planning, coordinating, and executing risk-based IT audits, including assessments of IT General Controls (ITGCs), application controls, cybersecurity, infrastructure, and other technology-related risk areas. The Manager works closely with IT and business stakeholders to evaluate control design and operating effectiveness, document findings, and ensure timely delivery of audit deliverables. This role also supports business process audits by providing technology subject matter expertise, evaluating automated controls, system dependencies, and IT-related risks within broader business audit objectives. The Manager, IT Internal Audit serves as a collaborative partner to IT, Finance, external auditors, and business management, supporting SOX ITGC compliance efforts, monitoring remediation activities, and driving continuous improvements in audit quality and operational efficiency.

    Location: New York City, Norwalk, CT, Boston, MA (Hybrid)

    Responsibilities

    IT Audit Planning & Execution

    • Plan, coordinate, and execute IT audits including scoping, fieldwork, review, and reporting
    • Assess ITGCs, application controls, automated controls, cybersecurity, and infrastructure risks in accordance with established methodologies
    • Perform substantive technical testing (access reviews, configuration analysis, cloud architecture, data analytics, artificial intelligence) when control gaps or ambiguity require going beyond standard control evaluation
    • Review workpapers, testing conclusions, and supporting documentation to ensure accuracy, consistency, and quality
    • Partner with Internal Audit leadership and stakeholders to develop annual audit plans aligned with organizational risk priorities
    • Identify emerging technology risks and recommend modifications to audit coverage and procedures

    Business Audit Support

    • Support business process audits by identifying and evaluating technology components, automated controls, and system dependencies embedded within business operations
    • Provide subject matter expertise on technology-related risks within the broader context of business audit engagements

    Team Leadership & Development

    • Lead, mentor, and develop audit team members responsible for IT testing
    • Manage workload balancing, performance management, and resource planning across the IT audit portfolio

    Stakeholder Management & Communication

    • Build and maintain strong relationships with IT management, control owners, business leaders, Finance, and external auditors
    • Communicate audit findings and control deficiencies clearly and effectively to both technical and non-technical audiences
    • Support external auditor interactions by providing relevant documentation and assisting with SOX IT reliance activities

    Issue Management & Remediation

    • Oversee the identification, documentation, and evaluation of IT control deficiencies and audit findings
    • Monitor remediation activities, validate corrective actions, and report on finding trends and overall IT control environment health

    SOX & Compliance Support

    • Support SOX ITGC testing efforts, coach control owners, and help maintain high-quality workpaper documentation to facilitate external auditor reliance
    • Contribute to maintaining consistency in audit methodologies and compliance standards across the organization

    Requirements

    • Bachelor's degree in Information Systems, Information Technology, Accounting, Computer Science, Cybersecurity, or a related field
    • 5+ years of progressive experience in IT Audit, Internal Audit, External Audit, SOX compliance, or a related assurance function
    • Experience supporting or managing audit teams and executing IT audit portfolios, preferably within a publicly traded organization
    • Experience drafting audit scope memos, findings, and formal audit reports with clear, concise, and well-supported conclusions for both technical and non-technical audiences
    • Knowledge of ITGCs, application controls, automated controls, cybersecurity, and infrastructure risk concepts
    • Hands-on experience assessing technical infrastructure including network architecture and security, database platforms, cloud environments (AWS, Azure, or GCP), and emerging technologies such as AI/ML systems
    • Familiarity with financial reporting processes and the intersection of technology and internal controls over financial reporting
    • Strong project management, analytical, problem-solving, and stakeholder management skills
    • Ability to communicate effectively with senior leaders, IT management, control owners, and external auditors on both technical and non-technical topics
    • Must be legally authorized to work in the United States without the need for employer sponsorship, now or at any time in the future

    Qualifications

    • CIA, CISA, CISSP, or other relevant professional certification
    • Knowledge of ERP platforms such as Workday, Oracle, or SAP
    • Experience with GRC platforms and audit management tools
    • Experience leveraging data analytics, automation, and continuous monitoring to enhance audit effectiveness and efficiency
    • Demonstrated ability to contribute to process improvement and control optimization initiatives within an audit or assurance function

    Benefits

    • Health, life, and disability insurance
    • Retirement