IT Audit Manager

We are seeking an experienced IT Audit Manager to lead technology-focused internal audit activities for a large organization operating in a highly regulated environment.

This position will be responsible for assessing technology risks, evaluating the design and operating effectiveness of internal controls, leading IT audit engagements, and supporting SOX compliance initiatives.

The ideal candidate will bring a strong combination of hands-on IT audit experience, SOX ITGC expertise, technology risk management, cybersecurity controls, and audit leadership. This individual should be comfortable evaluating complex technology environments, identifying control deficiencies, developing practical remediation recommendations, and communicating findings to senior management and key stakeholders.

Salary: $125,000 - $135,000 base salary

IT Audit & Controls

• Lead risk-based IT audit engagements from planning and scoping through testing, reporting, and remediation follow-up
• Develop audit programs and testing approaches for IT processes, applications, infrastructure, and security controls
• Assess the design and operating effectiveness of IT General Controls (ITGCs) and IT Application Controls (ITACs)
• Evaluate controls related to:
  • Logical access and identity management
  • Change management
  • IT operations
  • System development
  • Technology governance

SOX Compliance

• Review audit documentation, testing results, and workpapers for quality, accuracy, and completeness
• Identify control deficiencies, assess associated risks, and recommend corrective actions
• Lead and execute SOX ITGC testing supporting financial reporting requirements
• Evaluate access management, change management, IT operations, automated controls, system-generated reports, and interfaces
• Partner with IT, business process owners, compliance teams, and external auditors to support SOX requirements
• Evaluate technology controls across enterprise applications, infrastructure, and supporting systems
• Support control deficiency assessments, remediation planning, and follow-up testing
• Identify opportunities to improve SOX processes, testing efficiency, documentation, and control effectiveness

Technology Risk & Cybersecurity

• Conduct technology risk assessments across applications, infrastructure, cybersecurity, and operational resilience
• Evaluate cloud environments, security configurations, identity and access management, and vulnerability management practices
• Review controls against established frameworks including NIST, COBIT, and COSO
• Assess IT governance, SDLC, technology implementations, and change management processes
• Evaluate business continuity, disaster recovery, data protection, and incident response controls
• Assess third-party technology risks, vendor controls, and SOC reports

Leadership & Stakeholder Management

• Manage multiple IT audit engagements while maintaining timelines, quality standards, and priorities
• Provide leadership, coaching, and technical guidance to audit team members
• Partner with IT leadership, business stakeholders, risk, compliance, and other functions to identify and address technology risks
• Prepare clear audit reports outlining findings, risk exposure, root causes, and recommended corrective actions
• Present findings and recommendations to management and senior leadership
• Track outstanding audit findings and monitor remediation activities
• Identify opportunities to improve audit methodologies through automation, data analytics, and continuous improvement

• Bachelor's degree in Accounting, Information Systems, Information Technology, Computer Science, Finance, or a related field
• 7+ years of progressive experience in IT audit, technology risk, internal audit, or IT compliance
• Experience leading IT audit engagements and overseeing audit testing
• Strong hands-on experience with SOX ITGC testing
• Experience evaluating controls related to access management, change management, and IT operations
• Experience evaluating IT Application Controls and automated controls
• Knowledge of technology risk management, cybersecurity controls, and regulatory compliance
• Experience conducting technology risk assessments and identifying control deficiencies
• Experience supporting control remediation activities
• Familiarity with internal audit and risk frameworks including COSO, COBIT, and NIST
• Strong written and verbal communication skills with experience presenting audit findings to management
• Ability to manage multiple priorities and work effectively across technical and nontechnical teams

Preferred Qualifications

• Professional certification such as CISA, CIA, CPA, or CISSP
• Public accounting, Big 4, consulting, or corporate internal audit experience
• Experience within utilities, energy, financial services, or another highly regulated industry
• Experience auditing enterprise platforms such as SAP or Oracle
• Knowledge of cloud environments including AWS, Microsoft Azure, or Google Cloud
• Experience evaluating cybersecurity programs, IT infrastructure, or major technology transformations
• Exposure to Operational Technology (OT), Industrial Control Systems (ICS), or SCADA
• Experience with audit management systems, GRC platforms, automation, or data analytics

• Bachelor's degree required.

Salary : $125,000 - $135,000