Auditor Principal​/Information Technology

Requisition Number

Requisition Number RE55652

Working Title

Working Title Information Technology Auditor Principal

Department Name

Department Name 1A000:

Internal Audit

Work Location

Work Location Lexington, KY

Grade Level 47

Salary Range

Salary Range $58,/year

Type of Position

Type of Position Staff

Position Time Status

Position Time Status Full-Time

Required Education

BA

Required License/Registration/Certification

None

Physical Requirements

Sitting for long periods of time; performing repetitive motion tasks; handling of light-weight objects up to 10 pounds, and some standing or walking.

Shift

Primarily days with core hours Monday – Friday from 8:00AM
-5:00PM. However, additional evenings and/or weekends may be necessary to accomplish work goals and workload.

The University of Kentucky is seeking an Information Technology Auditor Principal to join the Internal Audit team.

This position plays a key role in evaluating technology-related risks, internal controls, cybersecurity practices, system configurations, and regulatory compliance across the university. The Information Technology Auditor Principal leads complex audit analytics and risk assessment activities, identifies opportunities for process improvement, and delivers actionable recommendations that strengthen governance, risk management, and operational effectiveness.

• Lead information technology audit analytics, continuous monitoring activities, and technology risk assessments.
• Develop and maintain analytical approaches to evaluate IT controls, cybersecurity risks, system configurations, regulatory compliance requirements, and emerging technology risks.
• Analyze trends, identify control weaknesses, and recommend risk mitigation and process improvement opportunities.
• Collaborate with audit leadership to support audit planning, engagement strategies, and risk-based prioritization of audit activities.
• Lead complex audit assignments and provide guidance to team members on technology-related risks and audit methodologies.
• Develop and maintain audit documentation, testing approaches, work papers, and supporting evidence in accordance with professional standards.
• Serve as a subject matter resource on technology auditing, cybersecurity, analytics, and emerging technologies.
• Contribute to departmental initiatives and support technology infrastructure activities as needed.

• Strong technical, analytical, organizational, and planning skills.
• Knowledge of information technology auditing, cybersecurity concepts, internal controls, regulatory compliance, and risk assessment practices.
• Ability to translate complex technical findings into clear, actionable recommendations for stakeholders.
• Experience developing audit methodologies, maintaining high-quality work papers, and supporting professional audit standards.
• Effective communication, leadership, problem-solving, and mentoring abilities.
• Initiative, professional judgment, ethical decision-making, and a commitment to continuous learning.
• 5 years of related experience

• Opportunity to help strengthen risk management, governance, and internal controls across a major research university.
• Exposure to a broad range of technology environments, cybersecurity challenges, and emerging technology risks.
• Ability to serve as a trusted advisor and technical resource within a collaborative Internal Audit team.
• Opportunities to advance expertise in information technology auditing, analytics, and professional audit practices.

As technology environments continue to evolve, the university relies on strong oversight of cybersecurity, regulatory compliance, and technology-related risks. This role provides critical support in identifying vulnerabilities, evaluating controls, and helping leadership make informed risk management decisions.

The Information Technology Auditor Principal will contribute to the continued advancement of Internal Audit by applying analytics, emerging technology knowledge, and professional auditing practices that strengthen institutional effectiveness and accountability.