IT Audit Manager

The ideal candidate brings extensive experience leading audit and compliance programs across multiple frameworks and certifications. The IT Audit Manager builds and runs Tanium’’s audit program, leading a team of auditors, developing audit methodology, and driving remediation of control gaps. The IT Audit Manager works closely with leadership, external assessors, and stakeholders across the business to ensure Tanium’’s compliance program remains consistent, efficient, and audit-ready.

This is a hybrid position, which will require in person attendance several days each week in one of the following locations: Addison, TX; Bellevue, WA; Durham, NC; Emeryville, CA; or Reston, VA.

What you’ll do:

• Leads and supports expansion of Tanium’s audit program
• Develops and implements audit methodology, processes, and templates to drive a consistent, predictable, and repeatable audit program
• Leads and coaches a globally distributed team of auditors, assigning work, setting priorities, and monitoring progress through the audit lifecycle
• Identifies, tracks, and reports on critical audit KPIs to leadership, including budget-to-actuals, deficiencies, quality and accuracy, and program maturity
• Reviews audit reports for quality, ensuring findings and remediation recommendations are clear, accurate, and actionable
• Coordinates with external auditors and assessors on audit program logistics, information-sharing, and treatment of identified deficiencies
• Ensures plans of action and milestones are established for gaps identified during risk assessments, audits, and inspections
• Advises senior leadership on audit findings, control weaknesses, and risk mitigation approaches
• Monitors emerging technologies, laws, and regulations for their potential impact on the audit program
• Partners across departments and business units to implement the organization’s audit principles and programs, This link leads to the machine readable files that are made available in response to the federal Transparency in Coverage Rule and includes negotiated service rates and out-of-network allowed amounts between health plans and healthcare providers. The machine-readable files are formatted to allow researchers, regulators, and application developers to more easily access and analyze data.

• Bachelor’’s Degree in a related field, or equivalent experience
• Relevant certifications preferred such as CISSP, CISM. CISA, etc.
• Experience
• Extensive experience leading audit or compliance functions in a similar role
• Project management experience, including leading and organizing a team to complete work within a defined timeframe and budget
• Confident delegating tasks, and consistent in tracking and monitoring progress against milestones
• Knowledgeable in frameworks such as NIST SP 800 series, FISMA, ISO 27001
• Expert understanding of ISO 27000 series and SOC 2 Type II frameworks
• Exposure to a broad range of audits and frameworks, such as: UK CE, TISAX, ISO 27701, ISO 42001, IRAP, ISMAP, MTCS, NIS2, EU CRA, PCI-DSS, DORA, ENS, EU AI Act and GDPR
• Skilled in applying technical and program-management expertise to plan, track, and report on regulated program deliverables
• Experience tracking and driving remediation of control deficiencies and gaps identified internally and externally
• Extensive experience with audit program metrics and KPIs, and strong program/project management fundamentals
• Technical aptitude and a fundamental understanding of cloud infrastructure and SaaS technologies
• Experience managing a distributed, global team across varying time zones and geographies
• Strong verbal and written communication skills, with the ability to work effectively across diverse, cross-functional team, Actuals, Artificial Intelligence (AI), Audit Metrics, Auditing, Budgeting, CISA - Certified Information Systems Auditor, CISM - Certified Information Security Manager, CISSP - Certified Information Systems Security Professional, Cloud Computing, Coaching, Communication Skills, Computer Security, Cross-Functional, Data Analysis, Develop Methodologies, Diversity, Emerging Technology, Endpoint Security, Establish Priorities, External Audit, FISMA - Federal Information Security Management Act, Health Plan, Healthcare Providers, ISO (International Organization for Standardization), Information Technology & Information Systems, Information Technology/Systems Audit, Leadership, LinkedIn, Logistics, NIS (Network Information Service), PCI-DSS, Performance Metrics, Presentation/Verbal Skills, Project Tracking, Project/Program Management, Regulations, Risk Analysis, Risk Management, Software Development, Software as a Service (SaaS), Team Lead/Manager, U.S. National Institute of Standards and Technology (NIST), Writing Skills

The annual base salary range for this full-time position is $101,000 to $155,000. This range is an estimate for what Tanium will pay a new hire. The actual annual base salary offered may be adjusted based on a variety of factors, including but not limited to, location, education, skills, training, and experience.

In addition to an annual base salary, team members will receive equity awards and a generous benefits package consisting of medical, dental and vision plan, family planning benefits, health savings account, flexible spending account, transportation savings account, 401(k) retirement savings plan with company match, life, accident and disability coverage, business travel accident insurance, employee assistance programs, disability insurance, and other well-being benefits.

Tanium is the Autonomous IT company. Driven by AI and real-time endpoint intelligence, Tanium Autonomous IT empowers IT and security teams to make their organizations unstoppable.

Many of the world’s leading organizations trust Tanium’s single, unified platform for endpoint management and security to innovate faster, stay resilient and move business forward with confidence, at scale. To learn how Tanium delivers Autonomous IT for unstoppable business - visit www.tanium.com and follow us on LinkedIn and X.

On a mission. Together.

At Tanium, we are stewards of a culture that emphasizes the importance of collaboration, respect, and diversity. In our pursuit of revolutionizing the way some of the largest enterprises and governments in the world solve their most difficult IT challenges, we are strengthened by our unique perspectives and by our collective actions.

As a global organization with stakeholders around the world, it’s imperative that the diversity of our customers and communities is reflected internally in our team members. We strive to create a diverse and inclusive environment where everyone feels they have opportunities to succeed and grow because we know that only together can we do great things.

Our commitment to excellence and innovation has earned us a place on the Forbes Cloud 100 list for ten consecutive years, and we continue to be recognized worldwide as a great place to work.