IT Audit Manager

This role is ideal for an experienced IT Auditor who enjoys assessing emerging technology risks, conducting complex risk-based audits, and serving as a trusted advisor to stakeholders. The position provides broad exposure across cloud technology, cybersecurity, application environments, software development practices, data governance, and enterprise technology initiatives.

Unlike heavily compliance-driven audit positions, this role emphasizes critical thinking, risk assessment, and delivering meaningful insights to the business rather than just checking the box., * Lead and execute end-to-end technology audit engagements covering cybersecurity, cloud computing, infrastructure, data management, technology governance, software development, and related risk areas.

• Perform risk assessments to identify key areas of exposure and help develop audit coverage plans.
• Develop audit scopes, testing strategies, and risk-based audit programs tailored to complex technology environments.
• Evaluate the effectiveness of technology controls and identify opportunities to strengthen governance, security, and operational resilience.
• Conduct walkthroughs, interviews, and testing procedures with technology, security, operations, and business stakeholders.
• Assess risks associated with modern technologies including cloud platforms, AI-enabled solutions, APIs, digital transformation initiatives, and third-party technology providers.
• Draft clear, concise audit observations and communicate findings to management and senior stakeholders.
• Monitor remediation efforts and validate the effectiveness of corrective actions.
• Contribute to the continuous enhancement of audit methodologies, reporting practices, and risk assessment processes.
• Utilize data analytics and technology-enabled audit techniques to improve audit effectiveness and identify emerging risks.

• 5+ years of experience within Internal Audit, Technology Audit, IT Risk, or Technology Controls environments.
• Experience executing risk-based audits within a formal Internal Audit function (3rd Line of Defense preferred).
• Strong understanding of technology risk management and control frameworks.
• Hands-on experience auditing one or more of the following:
• Cybersecurity programs
• Cloud platforms (AWS, Azure, GCP)
• Application security
• APIs and integrations
• Infrastructure and network environments
• Change management processes
• Data governance and data controls
• Software development lifecycle (SDLC)
• Ability to independently manage audit engagements from planning through reporting.
• Experience performing risk assessments, developing audit programs, documenting findings, and validating remediation activities.
• Strong communication and stakeholder management skills.
• Ability to challenge stakeholders constructively and influence control enhancements., * CISA, CISSP, CRISC, CIA, or similar professional certification.
• Experience within Asset Management, Financial Services, Insurance, Consulting, or Corporate Internal Audit environments.
• Exposure to cloud security concepts, cyber risk frameworks, or emerging technologies.
• Experience leveraging analytics tools such as Power BI, Tableau, Alteryx, ACL, IDEA, or similar platforms.
• Familiarity with AI governance, digital transformation programs, and evolving technology risk trends.