Manager - IT Internal Audit

The Manager, IT Internal Audit is responsible for leading and executing audits focused on information technology processes, systems, and controls across the organization. This role ensures that IT controls are effectively designed and operating to mitigate risks and support the reliability, integrity, and security of the company's systems and data. The ideal candidate will have deep knowledge of Sarbanes-Oxley (SOX) requirements including General IT Controls (GITCs), IT Application Controls, and the Systems Development Lifecycle (SDLC), along with proven experience in planning, executing, and reporting internal audit projects., * Develop and execute risk-based IT audit plans aligned with organizational objectives and regulatory requirements.

• Lead and perform audits of IT general controls, application controls, and system implementation projects.
• Evaluate IT systems and processes for efficiency, effectiveness, and compliance with applicable standards and policies.
• Assess control design and operating effectiveness for key systems and applications.
• Coordinate with business and technology teams to ensure audit findings are understood and remediations are tracked to completion., * Evaluate and test General IT Controls (GITCs), including access management, change management, IT operations, and system security.
• Review and assess IT Application Controls (ITACs) within key business systems (e.g., ERP, financial systems).
• Assess the Systems Development Lifecycle (SDLC) to ensure appropriate project governance, testing, change control, and deployment processes are followed.
• Identify opportunities to improve IT processes and strengthen the internal control environment., * Prepare clear, concise, and insightful audit reports summarizing findings, risks, and recommendations.
• Present audit results and recommendations to senior management and relevant stakeholders.
• Support continuous improvement of the audit methodology, templates, and reporting standards., * Manage and mentor audit staff, providing guidance on audit methodology, technical topics, and professional development.
• Partner with business functions such as enterprise risk management, cybersecurity, and compliance teams to support integrated risk and control assessments.
• Stay current with emerging IT risks, technologies, and audit practices.
• Other duties as assigned, * Applicable professional certification required (CISA, CISSP, CIA, CPA, etc.)
• Strong knowledge and application of Internal Audit and IT audit standards and practices (e.g., IIA, ISACA) and industry-accepted IT Governance standards (e.g., COBIT).
• Familiarity with frameworks such as ISO 27001 and NIST.
• Experience working with or auditing IT applications, databases, platforms, and networks. Including IT General and Application Controls and system development lifecycle controls.
• Proficient or working knowledge of ERP applications, databases, operating systems, and network systems. Working technical knowledge of contemporary network and PC operating systems, hardware, protocols, and standards.
• Experience with data analytics (e.g., Power BI, Tableau, Alteryx) or other data-driven analytical tools and procedures.
• Experience with audit management tools (e.g., AuditBoard, TeamMate, HighBond/Diligent).
• Key competencies include building strategic working relationships, leading through vision and values, decision-making, facilitating change, communication, customer focus, organizational awareness, building a successful team, persuasiveness, coaching, and executive presence.
• Ability to present ideas in business-friendly and user-friendly language.

• Bachelor's degree in information systems, computer science, accounting or related field required.
• 5-10 years of experience in IT audit, information security, or related field; at least 3 years in a managerial or lead role.
• Experience in public accounting or large corporate internal audit environment preferred.