> Markdown version of [/jobs/ext/3537338-it-audit-project-manager](https://www.wearedevelopers.com/jobs/ext/3537338-it-audit-project-manager). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# IT Audit Project Manager

- **Company:** Nutanix
- **Location:** San Jose, CA, United States (Remote available)
- **Experience:** Expert
- **Salary:** $229,000.0
- **Contract:** Permanent contract
- **Skills:** Artificial Intelligence, Big Data, Software as a Service, Control Objectives for Information and Related Technology (COBIT), Cyber Security, Information Systems, Databases, Identity and Access Management, Information Technology Audit, Netsuite, Salesforce.Com, Software Engineering, Enterprise Software Applications, Cloud Platform System, IT General Controls (ITGC), Delivery Pipeline, Generative AI, Information Technology, Data Analytics, Workday, User Administration
- **Published:** September 30, 2026
- **Apply:** https://jobs.jobvite.com/nutanix/job/ogcSAfwE/apply

## About the Role

The ideal candidate brings 5-7 years of progressive experience, ideally derived from a Big 4 public accounting firm or a large-scale technology environment. You will combine strong project management discipline with deep technical audit expertise to independently evaluate enterprise risks, drive SOX compliance, and serve as a trusted advisor across tech and business teams., * Experience: 5-7 years of hands-on experience in IT Audit, Technology Risk, Information Security, or IT Compliance.

 * Background: Big 4 public accounting firm experience or experience within a large-scale Tech/SaaS company is strongly preferred.
 * Education: Bachelor's degree in Information Systems, Computer Science, Cybersecurity, Accounting, Business, or a related technical discipline.
 * Certifications: Active professional certification strongly preferred
 * Technical Frameworks & Compliance:

 * Deep understanding of Sarbanes-Oxley (SOX) Section 404 ITGCs, ITACs (IT-Dependent Automated Controls), and SOC 1 / SOC 2 reports.
 * Solid working knowledge of industry frameworks: COBIT, NIST Cybersecurity Framework, ISO 27001, and COSO.

Preferred Qualifications & Skills

 * Enterprise Application Expertise: Hands-on audit or control testing experience across core enterprise SaaS platforms such as Salesforce, Workday, and NetSuite.
 * Data & Analytics: Experience using data analysis tools to analyze large datasets and automate control testing.
 * Self-Starter Mindset: Demonstrated ability to manage projects independently with minimal supervision, navigating complex technical environments to drive results.
 * Communication: Exceptional narrative writing skills and executive presence to effectively communicate risk findings to engineering, IT, and executive leadership in San Jose.

## Description

We are seeking a highly motivated, hands-on IT Audit Project Manager to join our Internal Audit team in San Jose, CA. In this individual contributor role, you will report directly to the Director of Internal Audit and lead the planning, execution, and reporting of complex IT audit engagements and SOX compliance across our enterprise tech landscape., 1. End-to-End Audit Execution & Project Management

 * Lead and execute risk-based IT audits, SOX IT General Controls (ITGC) assessments, application control reviews, and integrated operational audits from scoping through final reporting.
 * Serve as the hands-on primary internal audit contact for assigned audit initiatives, defining scope, creating audit programs, establishing project timelines, and ensuring deliverables meet high quality standards on schedule.
 * Perform risk assessments to evaluate technical vulnerabilities, access governance, change management, and configuration security across operating systems, databases, cloud ecosystems, and enterprise applications.
 * Draft clear, concise, and impact driven audit findings and partner with control owners to track issue remediation progress and perform assessments to verify successful resolution.
 * Assess emerging risk areas, including AI/Generative AI governance, automated pipelines, data privacy (GDPR, CCPA), and Third-Party Risk Management (TPRM).
 * Partner with leadership to integrate IT risks into the broader Enterprise Risk Management (ERM) framework, aligning audit coverage with key enterprise risk profiles and mitigation goals.

 2. Enterprise Application & Control Testing
 * Evaluate, test, and validate ITGCs and automated application controls within business-critical platforms.
 * Audit segregation of duties (SoD), user access management, interface security, and custom workflows within core financial and operational software environments.