Internal Audit Manager IT & Data Analytics

Location: New York, NY or Dallas, TX (Hybrid, 3 days in-office)
Duration: 3 5 months initial contract (likely to extend)
Schedule: Full-time, hands-on role (no team management responsibilities)

Position Overview

We are seeking an experienced Internal Audit Manager IT & Data Analytics to lead audit engagements focused on IT risk, controls, and regulatory compliance while leveraging data analytics and visualization tools to enhance reporting. This is a hands-on role requiring strong technical and communication skills, with direct engagement across business and technology stakeholders.

Key Responsibilities

• Plan and execute IT audits across areas including application controls, general IT controls, cybersecurity, data governance, and risk/compliance.

• Perform SOX 404 testing for ITGCs and automated controls to ensure regulatory compliance.

• Use SQL and other tools to independently extract, analyze, and validate data for audit procedures.

• Build and maintain dashboards (Power BI strongly preferred) to visualize audit results, trends, and performance metrics.

• Prepare clear, concise audit reports with actionable recommendations.

• Partner with IT, compliance, finance, and operations teams to assess risk and strengthen controls.

• Follow up on remediation efforts and track resolution of audit issues.

• Communicate effectively with stakeholders, presenting findings and defending recommendations with confidence.

Candidate Profile

• Experience: 3 10 years total

• Core Skills: IT audit/risk experience combined with strong reporting/visualization capabilities.

• Tools: Power BI strongly preferred; Tableau, Qlik, Alteryx, or SQL acceptable alternatives.

• Background: Proven control testing experience (application controls, cybersecurity, risk/compliance, SOX testing).

• Technical Skills: Strong SQL skills to independently extract/report data.

• Soft Skills: Excellent communication; ability to present confidently to senior stakeholders.

• Certifications (Preferred): CPA, CISA, or CIA.