IT Audit Manager

Job Description

Posted Thursday, January 15, 2026 at 5:00 AM

The IT Audit Manager will play a key role in ensuring SOX compliance, mitigating IT risks, and driving continuous improvement in processes and controls. This position requires strong leadership, excellent communication skills, and a proactive, results-oriented approach.

This role is responsible for designing, executing, and testing IT controls including General IT Controls (GITCs) and IT Application Controls (ITACs) in alignment with SOX 404 requirements. The IT Audit Manager will lead compliance efforts during major ERP implementations and provide advisory input to embed controls early in system design. The ideal candidate will have Big Four experience, strong knowledge of Oracle FCCS, SharePoint, and JD Edwards (JDE), and a proven track record of supporting ERP implementations from a compliance perspective.

• Design, assess, and test GITCs and ITACs across key financial systems and processes.
• Coordinate walkthroughs and testing with internal and external auditors, maintain documentation of control objectives, risks, and results.
• Identify control gaps and implement remediation plans with stakeholders; drive continuous improvement of the SOX control environment.
• Monitor IT infrastructure and application changes for SOX impact and provide training on SOX requirements to IT and business teams.
• Lead IT SOX compliance activities during ERP implementations, collaborating with project teams to embed controls in system design.
• Provide advisory input during major IT projects and system implementations to ensure SOX controls are incorporated early.
• Partner with business owners to identify control and process enhancement opportunities and communicate audit results clearly to senior management.
• Plan and conduct risk-based audits and special projects, including cybersecurity risk assessments in partnership with internal security teams.
• Support IT compliance initiatives such as cybersecurity and data governance; stay current on technology trends and regulatory frameworks (e.g., NIST, COBIT, ISO 27001).
• Develop and leverage data analytics and automation to enhance audit methodologies, tools, and practices.
• Collaborate cross-functionally with IT, finance, and business teams to identify emerging risks and ensure integrated audit coverage across systems and processes.
• Coordinate with business process auditors to align audit scope and coverage.

• Bachelor’s degree in information systems, Accounting, or related field; CISA, CPA, or CIA preferred.
• Minimum 5 years of relevant experience in IT audit, IT risk management, or IT controls, including SOX 404 compliance and ERP implementation.
• Big Four public accounting experience strongly preferred; experience in a publicly traded, global manufacturing company is a plus.
• Deep understanding of SOX 404 requirements, General IT Controls (GITCs), IT Application Controls (ITACs), and IT frameworks such as COBIT, ISO, NIST, and COSO.
• Proven ability to manage end-to-end IT audits, including SOX 404, pre/post‑implementation reviews, maturity assessments, and operational audits reliant on system functionality.
• Familiarity with change management, access provisioning, and SDLC controls.
• Demonstrated leadership in managing audit teams, including offshore resources or third‑party vendors, ensuring quality and efficiency.
• Ability to provide proactive advisory input on systems and controls during project planning, not just post‑implementation gap identification.
• Excellent communication and project management skills, capable of engaging with technical and non‑technical stakeholders across all organizational levels.
• Strong analytical and problem‑solving abilities; self‑starter who takes ownership of deliverables with minimal oversight.
• Proven ability to build trust and influence across a dynamic organization.
• Availability for roughly 20% international travel.

• Experience supporting ERP implementations from a compliance perspective.
• Knowledge of GRC tools and automated control testing.
• Experience with cloud‑based systems and familiarity with cybersecurity frameworks.
• Hands‑on experience with…