Senior Manager, Internal Audit - Technology, AI, Security and Privacy Audit

Responsibilities

• Audit Leadership & Execution: Lead and manage end-to-end technology audit engagements, including annual planning, risk assessment, scoping, execution, and reporting. Ensure audit work is executed effectively, efficiently, and in accordance with IA methodologies and professional standards.
• Technology Risk Focus: Develop and execute audit programs focused on high-risk technology areas, including cloud computing (AWS, GCP, etc.), cybersecurity, data governance and privacy (GDPR, CCPA), DevOps, CI/CD pipelines, and emerging technologies (AI/ML).
• Team Management & Development: Manage and mentor a team of technology audit professionals. Provide coaching, performance feedback, and technical guidance to foster a high-performing and engaged team.
• Stakeholder Engagement: Build and maintain strong working relationships with key technology, product, security, and engineering leaders across Intuit. Effectively communicate audit findings, recommendations, and risk insights to senior management.
• Advisory Role: Serve as a trusted advisor to technology business partners, providing proactive control recommendations and insight on system implementations, process changes, and strategic initiatives.
• Continuous Improvement: Drive innovation and process improvement within the IA function by identifying and implementing new audit tools, techniques (e.g., AI, data analytics, automation), and methodologies to enhance audit efficiency and coverage.
• Reporting: Prepare high-quality, concise audit reports and present results to management and the Audit Committee.
• Integrated Audit Expertise: Act as the primary technology expert and advisor for integrated audits (IT/Product/Financial), ensuring proper scoping, control reliance, and effective testing of end to end controls with expertise in in-house product development with microservices and serverless architecture Technology Stack.
• Remediation Management: Ensure timely and effective resolution of identified issues, track progress, and verify that corrective actions prevent recurrence. Advise and oversee the building of complex management action plans.

Qualifications

• Education: Bachelor's degree in Information Technology, Computer Science, or a related field. Master's degree preferred.
• Experience: 12+ years of progressive experience in technology audit, risk management, with at least 3+ years in a senior management or leadership role, preferably within the technology or financial services industry.
• Domain Expertise: Deep technical knowledge and experience auditing complex cloud environments (e.g., AWS, GCP, Azure), modern software development practices (Agile, DevOps, CI/CD), network security, and operating systems. AI knowledge and experience in AI audits are highly preferable.
• AI Exposure: Ability to drive digital transformation in audit by leading teams in deploying automation including agentic AI and RPA, transitioning the function from sample-based checks to AI-enabled predictive insight, extremely valuable.
• Certifications: Professional certifications desired (e.g., CISA, CISSP, CISM). Additional certifications such as AWS/Azure/GCP Cloud certifications are a significant plus.
• Audit/Risk Frameworks: Strong working knowledge of technology risk and control frameworks (e.g., COBIT, NIST, ISO 27001) and regulatory requirements (e.g., SOX, GDPR, CCPA).
• Communication & Influence: Excellent verbal and written communication skills with the ability to articulate complex technical issues and risks to both technical and non-technical audiences. Proven ability to influence change.
• Leadership: Demonstrated leadership skills in building, coaching, and mentoring high-performing teams in a dynamic, rapidly changing environment.