> Markdown version of [/jobs/ext/1988157-manager-it-audit-risk-managemen](https://www.wearedevelopers.com/jobs/ext/1988157-manager-it-audit-risk-managemen). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Manager (IT AUDIT/RISK MANAGEMEN

- **Company:** Komplete Teleservices
- **Location:** Tysons, VA, United States
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Audit Trail, Data Governance, DevOps, Scrum Methodology, Software Maintenance, Systems Development Life Cycle, Power BI, GitHub Copilot, Technical Debt, Data Management
- **Published:** August 8, 2026
- **Apply:** https://www.dice.com/job-detail/dec6161e-893b-4728-9ecb-00922d1f8235

## About the Role

* 10+ years in internal audit, technology risk, or IT advisory, including leading SDLC/DevOps process reviews

 * Hands-on experience assessing application maintenance/change management governance (incident management, release governance, technical debt)

 * Experience evaluating data governance and self-service BI environments (e.g., PowerBI or comparable), including data quality, access controls, and report validation/auditability

 * Familiarity with AI-assisted development tooling (e.g., GitHub Copilot) and associated governance/control considerations

 * Experience building implementation-ready, board- or CAE-ready deliverables (not conceptual outputs), CISA and/or CIA required; PMP or Agile/Scrum certification a plus; prior experience with in-house audit management platforms (e.g., AuditBoard, TeamMate, or bespoke systems similar to APPEX) strongly preferred.

## Description

Directs day-to-day execution across all three review workstreams (Technology Development, Application Maintenance, Data Management), owns the project plan and milestone tracking, and is the primary point of contact for Internal Audit''s designated liaisons., * Design and own the overall review methodology, workplans, and control/testing matrices across all three scope areas

 * Lead working sessions, design reviews, and stakeholder interviews with technology development, application support, and data management teams

 * Review and approve control testing performed by Managers/Senior Consultants; ensure workpapers meet quality and evidentiary standards

 * Own the client-facing deliverables: current-state assessment, gap analysis, prioritized roadmap, and final report

 * Manage engagement risk, timeline adherence, and budget-to-actual tracking


## Related Videos

- [From DevOps to Scaled DevOps: How We’re Rebuilding Continuous Delivery as a Platform](https://www.wearedevelopers.com/videos/100018-from-devops-to-scaled-devops-how-we-re-rebuilding-continuous-delivery-as-a-platform)
- [Beyond Dashboards: Fixing Text-to-SQL with Semantic RAG](https://www.wearedevelopers.com/videos/2036-beyond-dashboards-fixing-text-to-sql-with-semantic-rag)
- [Resilient by Design: Building Robust Architectures in High-Stakes Financial Systems](https://www.wearedevelopers.com/videos/2106-resilient-by-design-building-robust-architectures-in-high-stakes-financial-systems)
- [Great DevEx and Regulatory Compliance - Possible?](https://www.wearedevelopers.com/videos/1426-great-devex-and-regulatory-compliance-possible)
- [DevOps Maturity Check – a way to balance autonomy and alignment](https://www.wearedevelopers.com/videos/58-devops-maturity-check-a-way-to-balance-autonomy-and-alignment)
- [How One Developer Built the Back Office for 10 Million Companies](https://www.wearedevelopers.com/videos/100082-how-one-developer-built-the-back-office-for-10-million-companies)

## Related Articles

- [Navigating the AI Shift](https://www.wearedevelopers.com/magazine/629-navigating-the-ai-shift)
- [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)
- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Coffee with Developers - Maria Apazoglou - Making AI understandable for all in production](https://www.wearedevelopers.com/magazine/475-coffee-with-developers-maria-apazoglou-making-ai-understandable-for-all-in-production)
- [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again)