> Markdown version of [/jobs/ext/3388415-senior-it-auditor-it-cyber](https://www.wearedevelopers.com/jobs/ext/3388415-senior-it-auditor-it-cyber). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior IT Auditor- IT & Cyber - **Company:** Moody's Corporation - **Location:** New York, NY, United States - **Experience:** Expert - **Salary:** $82,400.0 - $119,450.0 - **Contract:** Permanent contract - **Skills:** Microsoft Excel, Agile Methodology, Artificial Intelligence, Amazon Web Services, Data Analysis, Microsoft Azure, Software as a Service, Cloud Computing, Cloud Computing Security, Control Objectives for Information and Related Technology (COBIT), Cyber Security, Information Systems, Computer Engineering, DevOps, Identity and Access Management, Information Technology Audit, Network Security, Systems Development Life Cycle, Power BI, Software Tools, Secure Coding, Tableau (Software), Software Vulnerability Management, Software Security, Information Technology, Data Analytics, CIS Benchmarks, Devsecops - **Published:** September 3, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=445011d23c8f8c9f ## About the Role * Minimum of 3 years of experience in a Big 4 firm or global organization in IT audit, cybersecurity, risk, or controls * Strong understanding of IT and cybersecurity risk management, controls, and governance frameworks (e.g., NIST, ISO, COBIT, COSO) * Experience auditing cloud environments (AWS, Azure, SaaS) including security architecture, configurations, and access controls * Knowledge of identity and access management (IAM, PAM, SSO, MFA) and privileged access oversight * Understanding of secure development practices (SDLC, Agile, DevOps, DevSecOps) and application security controls * Experience using data analytics tools (e.g., Excel, Power BI, Tableau) to support audit testing and insights * Technical Knowledge: Strong understanding of cybersecurity, cloud infrastructure, data analytics, identity and access management, network security, vulnerability management, incident response, data protection, third-party risk management, and industry frameworks such as NIST, ISO 27001, SOC 2, DORA, and CIS Controls. * Demonstrated proficiency in artificial intelligence concepts, with hands-on experience using AI tools to streamline workflows and enhance operational efficiency. Proven ability to implement AI-powered solutions to solve business challenges. Demonstrates a growing awareness of AI risk management and a commitment to responsible and ethical AI use Education * Bachelor's degree required in cybersecurity, computer science, computer engineering, information technology, information systems, or a related field * Professional certifications such as CISSP, CISA, or equivalent are preferred ## Description This role is responsible for leading and executing risk-based IT and cybersecurity audits while providing insights on emerging technology risks across the organization. * Lead and execute IT and cybersecurity audits with a focus on cloud, AI, and modern technology risks * Develop an understanding of technology environments, business processes, and associated risks and controls * Plan audit scope through process analysis, risk assessment, and control identification * Evaluate cybersecurity governance, cloud security, identity access management, infrastructure security, and data protection controls * Execute audit testing and maintain high-quality, well-documented workpapers * Translate technical findings into clear, actionable business insights and recommendations * Communicate effectively with stakeholders across Cyber, Technology, Data, and Product teams * Track and validate remediation efforts to ensure sustainable control improvements About the Team The Internal Audit team is dedicated to delivering independent, objective assurance and advisory services that enhance organizational value and strengthen risk management, control, and governance processes across Moody's global operations.