Internal Audit – IT Manager

Internal Audit – IT Manager

Requirements

• Bachelor’s degree in Information Technology, Computer Science, Accounting, Business Administration, Finance, or other related field with strong quantitative focus
• 5+ years of experience in IT auditing, IT risk management and compliance
• Prior managerial experience in IT audit, IT risk management or compliance
• Strong knowledge of SOX ITGCs, IT compliance frameworks, and industry best practices
• Strong understanding of IT systems, networks, databases, and security protocols
• Familiarity with IT/Privacy frameworks (NIST, ISO 27001, CIS, SOC and GDPR)
• Certifications: CISA, CISM and/or CISSP

Responsibilities

• Lead and manage IT audits, advisory projects from the annual audit plan, including system implementations, IT operations, cybersecurity, and cloud security
• Oversee and execute the SOX IT compliance program, ensuring key controls are tested, deficiencies are evaluated, and remediation plans are tracked
• Perform risk assessments, develop IT audit scopes, and design audit programs based on industry best practices
• Manage end-to-end IT audit projects, including planning, fieldwork, reporting, and follow-up
• Evaluate IT processes against leading frameworks (e.g., NIST, GDPR, SOC, and CSA CCM) to identify control gaps and recommend improvements
• Perform detailed reviews of audit workpapers to ensure accuracy, completeness, and compliance with internal audit standards, compliance /regulatory requirements, and best practices, while providing constructive feedback to maintain audit quality
• Provide leadership and guidance to IT auditors and coordinate efforts with external auditors as needed
• Build strong working relationships with IT, security, compliance, and business teams to align audit activities with business objectives
• Partner with control owners to provide guidance on risk mitigation and best practices for IT governance and security
• Work cross-functionally to identify emerging IT risks and proactively address vulnerabilities
• Present audit findings and recommendations to senior management
• Drive audit automation and analytics initiatives to enhance efficiency and insights
• Stay updated on evolving IT risks, cybersecurity threats, and regulatory changes to refine audit methodologies
• Support advisory engagements related to IT transformation projects, system implementations, and emerging technologies

Preferred Qualifications

• Background in ERP, multi-cloud security, privacy, and data analytics is a plus
• Experience with data analytics tools and audit automation is a plus