Senior Manager Technology & Cybersecurity Audit

Senior Manager, Cybersecurity & Technology Audit Overview

The Senior Manager, Cybersecurity & Technology Audit provides senior leadership within Internal Audit, delivering independent assurance and advisory services across the organization’s cybersecurity, technology risk, and digital transformation landscape.

The role serves as Internal Audit’s subject matter expert for cybersecurity and technology risk, partnering with the VP of IT and senior business leaders to assess cyber resilience, technology governance, security controls, and emerging technology risks.

The Senior Manager leads complex cybersecurity and technology audits, advises on strategic technology initiatives, and helps strengthen the organization’s overall cyber and technology risk posture while maintaining Internal Audit independence.

• Lead the cybersecurity and technology risk component of the annual, risk-based Internal Audit plan
• Serve as Internal Audit’s subject matter expert for cybersecurity, technology risk, and emerging technologies
• Identify and assess evolving cyber, technology, regulatory, operational, and emerging risks
• Monitor the external threat landscape, regulatory developments, and technology trends to maintain relevant audit coverage
• Coordinate specialist, co-sourced, and external audit support as required.

• Lead independent assessments of cybersecurity governance, control effectiveness, and resilience across areas includiing:
• Security governance and operations
• Identity and privileged access management
• Cloud, network, infrastructure, and endpoint security
• Vulnerability management and threat detection
• Incident response and ransomware preparedness
• Data protection and encryption
• Third-party and supply chain cyber risk
• Disaster recovery and business continuity
• AI governance and security
• Secure software development and Dev Sec Ops
• Operational Technology (OT/ICS), where applicable
• Evaluate cybersecurity programs against leading frameworks such as NIST CSF, NIST 800-53, ISO 27001, CIS Controls, COBIT, and applicable regulations.

• Provide independent, risk-focused advice to the VP of IT and senior business leaders.
• Support major technology initiatives including cloud transformation, ERP implementations, AI programs, identity modernization, Zero Trust, and digital transformation.
• Participate in technology governance forums and strategic initiatives to identify risks and control considerations early.
• Conduct cybersecurity risk assessments, maturity reviews, tabletop exercises, and control design assessments.
• Benchmark cybersecurity capabilities against industry practices and identify opportunities to improve resilience through automation, analytics, and continuous monitoring.

• Develop audit scopes, methodologies, and work programs for cybersecurity and technology risk engagements.
• Lead planning, fieldwork, and execution of complex audits and advisory reviews.
• Assess cybersecurity governance, cloud security, security architecture, identity management, third-party risk, and technology resilience.
• Perform targeted ITGC reviews where appropriate, coordinating with the leader responsible for ITGC and SOX assurance.
• Evaluate preparedness for cyber incidents, including incident response, vulnerability management, disaster recovery, and business continuity.
• Prepare executive-level reports outlining key risks, control gaps, business impact, root causes, and practical recommendations.
• Monitor remediation and elevate significant unresolved risks to senior management, the VP of Internal Audit, and Audit Committee as appropriate.
• Drive the use of data analytics, automation, continuous auditing, and AI-enabled techniques within Internal Audit.
• Maintain current knowledge of cybersecurity threats, regulatory requirements, and technology developments.
• Enhance cybersecurity audit methodologies and technology risk assessment capabilities.
• Mentor Internal Audit professionals and serve as the department’s technical resource for cybersecurity and technology risk.

• Bachelor’s degree in Cybersecurity, Information…