IT Audit Manager

We are seeking an experienced IT Audit Manager to lead technology-focused internal audit activities for a large organization operating in a highly regulated environment.

This position will be responsible for assessing technology risks, evaluating the design and operating effectiveness of internal controls, leading IT audit engagements, and supporting SOX compliance initiatives.

The ideal candidate will bring a strong combination of hands‑on IT audit experience, SOX ITGC expertise, technology risk management, cybersecurity controls, and audit leadership. This individual should be comfortable evaluating complex technology environments, identifying control deficiencies, developing practical remediation recommendations, and communicating findings to senior management and key stakeholders.

Salary: $125,000 - $135,000 base salary

• Lead risk-based IT audit engagements from planning and scoping through testing, reporting, and remediation follow-up
• Develop audit programs and testing approaches for IT processes, applications, infrastructure, and security controls
• Assess the design and operating effectiveness of IT General Controls (ITGCs) and IT Application Controls (ITACs)
• Evaluate controls related to:
  • Logical access and identity management
  • Change management
  • IT operations
  • System development
  • Technology governance

• Review audit documentation, testing results, and work papers for quality, accuracy, and completeness
• Identify control deficiencies, assess associated risks, and recommend corrective actions
• Lead and execute SOX ITGC testing supporting financial reporting requirements
• Evaluate access management, change management, IT operations, automated controls, system-generated reports, and interfaces
• Partner with IT, business process owners, compliance teams, and external auditors to support SOX requirements
• Evaluate technology controls across enterprise applications, infrastructure, and supporting systems
• Support control deficiency assessments, remediation planning, and follow-up testing
• Identify opportunities to improve SOX processes, testing efficiency, documentation, and control effectiveness

• Conduct technology risk assessments across applications, infrastructure, cybersecurity, and operational resilience
• Evaluate cloud environments, security configurations, identity and access management, and vulnerability management practices
• Review controls against established frameworks including NIST, COBIT, and COSO
• Assess IT governance, SDLC, technology implementations, and change management processes
• Evaluate business continuity, disaster recovery, data protection, and incident response controls
• Assess third‑party technology risks, vendor controls, and SOC reports

• Manage multiple IT audit engagements while maintaining timelines, quality standards, and priorities
• Provide leadership, coaching, and technical guidance to audit team members
• Partner with IT leadership, business stakeholders, risk, compliance, and other functions to identify and address technology risks
• Prepare clear audit reports outlining findings, risk exposure, root causes, and recommended corrective actions
• Present findings and recommendations to management and senior leadership
• Track outstanding audit findings and monitor remediation activities
• Identify opportunities to improve audit methodologies through automation, data analytics, and continuous improvement

• Bachelor's degree in Accounting, Information Systems, Information Technology, Computer Science, Finance, or a related field
• 7+ years of progressive experience in IT audit, technology risk, internal audit, or IT compliance
• Experience leading IT audit engagements and…