Manager, IT Internal Audit
Manager, IT Internal Audit
Posted 21 days ago
SENIORITY
Manager
About the role
- New York City, Norwalk, CT, Boston, MA (Hybrid)
- What You'll DoIT Audit Planning & Execution
- Plan, coordinate, and execute IT audits including scoping, fieldwork, review, and reporting
- Assess ITGCs, application controls, automated controls, cybersecurity, and infrastructure risks in accordance with established methodologies
- Perform substantive technical testing (access reviews, configuration analysis, cloud architecture, data analytics, artificial intelligence) when control gaps or ambiguity require going beyond standard control evaluation
- Review workpapers, testing conclusions, and supporting documentation to ensure accuracy, consistency, and quality
- Partner with Internal Audit leadership and stakeholders to develop annual audit plans aligned with organizational risk priorities
- Identify emerging technology risks and recommend modifications to audit coverage and procedures
- Business Audit SupportSupport business process audits by identifying and evaluating technology components, automated controls, and system dependencies embedded within business operations
- Provide subject matter expertise on technology-related risks within the broader context of business audit engagements
- Team Leadership & Development
- Lead, mentor, and develop audit team members responsible for IT testing
- Manage workload balancing, performance management, and resource planning across the IT audit portfolio
- Stakeholder Management & Communication
- Build and maintain strong relationships with IT management, control owners, business leaders, Finance, and external auditors
- Communicate audit findings and control deficiencies clearly and effectively to both technical and non-technical audiences
- Support external auditor interactions by providing relevant documentation and assisting with SOX IT reliance activities
- Issue Management & Remediation
- Oversee the identification, documentation, and evaluation of IT control deficiencies and audit findings
- Required Skills
- Bachelor's degree in Information Systems, Information Technology, Accounting, Computer Science, Cybersecurity, or a related field 5+ years of progressive experience in IT Audit, Internal Audit, External Audit, SOX compliance, or a related assurance function
- Experience supporting or managing audit teams and executing IT audit portfolios, preferably within a publicly traded organization
- Experience drafting audit scope memos, findings, and formal audit reports with clear, concise, and well-supported conclusions for both technical and non-technical audiences
- Knowledge of ITGCs, application controls, automated controls, cybersecurity, and infrastructure risk concepts
- Hands-on experience assessing technical infrastructure including network architecture and security, database platforms, cloud environments (AWS, Azure, or GCP), and emerging technologies such as AI/ML systems
- Familiarity with financial reporting processes and the intersection of technology and internal controls over financial reporting
- Strong project management, analytical, problem-solving, and stakeholder management skills
- Ability to communicate effectively with senior leaders, IT management, control owners, and external auditors on both technical and non-technical topics
- Must be legally authorized to work in the United States without the need for employer sponsorship, now or at any time in the future
- CIA, CISA, CISSP, or other relevant professional certification
- Knowledge of ERP platforms such as Workday, Oracle, or SAPExperience with GRC platforms and audit management tools
- Experience leveraging data analytics, automation, and continuous monitoring to enhance audit effectiveness and efficiency
- Demonstrated ability to contribute to process improvement and control optimization initiatives within an audit or assurance function
Before you apply
Applying takes about a minute. These four things decide how fast it moves after that.
Your profile is current
It's what we read first. Occupations, seniority and locations matter more than a long history.
Two examples you can talk through
Not a portfolio — just two pieces of work where you can explain the decisions and what you'd change.
A number in mind
What you're on now and what would make you move. We negotiate better when we know both.
Your notice period
Employers plan around it, and it's the question that stalls offers most often.
Once you apply, someone reads it and calls you before anything reaches the employer — usually within two working days.
