Dir IT Internal Audit
Listed on 2026-11-05
-
IT/Tech
Cybersecurity, IT Consultant, IT Business Analyst, IT Project Manager
At UKG, the work you do matters. The code you ship, the decisions you make, and the care you show a customer all add up to real impact. Today, tens of millions of workers start and end their days with our workforce operating platform. Helping people get paid, grow in their careers, and shape the future of their industries. That's what we do.
We never stop learning. We never stop challenging the norm. We push for better, and we celebrate the wins along the way. Here, you'll get flexibility that's real, benefits you can count on, and a team that succeeds together. Because at UKG, your work matters—and so do you.
UKG Internal Audit is evolving into a risk-aligned function focused on delivering relevant assurance, practical advice, and meaningful business insight. The Technology Risk and Resilience team provides independent assurance and advisory services across UKG's technology environment and SaaS products. This role reports to the Vice President of Internal Audit.
About the RoleAs Director, Technology Risk and Resilience, you will lead a broad technology risk portfolio and serve as a trusted advisor to senior technology and business leaders.
- Plan, scope and lead risk-based audits and advisory reviews across UKG's SaaS products, cloud environment, cybersecurity, engineering and software development, product and platform risk, operational resilience, data and privacy, artificial intelligence governance, and enterprise technology transformation.
- Build trusted relationships with Product, Engineering, Security, Cloud, and business leaders, using strong technical knowledge and business judgment to provide meaningful challenge and actionable risk and control insights.
- Provide proactive technology risk and control consulting on significant initiatives, product changes, transformation programs, and emerging risks to help leaders identify and address issues early.
- Lead independent audit work supporting UKG's ISO 27001and ISO 42001 certifications and related assurance requirements.
- Coordinate closely with second-line risk functions, including Governance, Risk and Compliance, Enterprise Risk Management, and Third-Party Risk Management, to align on key risks and provide an integrated view of technology risk.
- Lead and develop an in-house team of approximately three professionals and coordinate strategic co-source resources to provide specialized expertise and flexible capacity.
- 10+ years of relevant technology internal audit, technology risk and assurance, or consulting/advisory experience, including leadership responsibility.
- Significant experience assessing technology risks in SaaS environments, either within a SaaS company or advising SaaS clients.
- Demonstrated ability to evaluate complex technology environments while translating technical risks into clear business implications for senior executives.
- Relevant professional certification such as Certified Information Systems Auditor, Certified Internal Auditor, Certified Information Systems Security Professional, Certified Public Accountant, Chartered Accountant, or comparable credential.
- Ability to travel up to 20%.
- Demonstrated success leading high-performing teams, with a strong commitment to coaching, developing, and expanding team members' skills, experiences, and career growth.
- Agile and innovative mindset, with the ability to adapt audit, advisory, and stakeholder engagement approaches to meet evolving business priorities, risk conditions, and department needs.
- ISO Lead Auditor certification or similar experience leading ISO-related assurance activities.
- Experience across cloud architecture, cybersecurity, software development, product risk, AI governance, or technology resilience.
- Demonstr…
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).