Information Technology Audit Manager

Information Technology Audit Manager Job Summary

We are seeking an experienced Information Technology (IT) Audit Manager to lead risk-based IT audit engagements, oversee IT SOX compliance activities, and strengthen the organization’s technology risk management and internal control environment. This leadership role partners closely with business and technology stakeholders to evaluate IT risks, improve governance, and drive continuous improvement across audit processes. The ideal candidate combines deep technical audit expertise with strong leadership, communication, and data analytics skills to deliver meaningful insights and influence organizational decision-making.

• Lead the planning, execution, and documentation of IT General Controls (ITGC) audits and SOX compliance activities.
• Conduct walkthroughs, risk assessments, control testing, and evaluation of IT control effectiveness.
• Coordinate with external auditors to support reliance on internal audit testing and facilitate efficient audit execution.
• Evaluate control deficiencies, recommend remediation strategies, and monitor corrective action plans.
• Partner with business and technology teams to strengthen IT control design and operating effectiveness.

• Lead risk-based audits covering cybersecurity, information security, data privacy, cloud environments, enterprise applications, IT governance, infrastructure, and system implementations.
• Develop audit programs aligned with recognized industry frameworks such as NIST, ISO 27001, COBIT, and other applicable standards.
• Assess technology risks and recommend practical solutions to improve governance, compliance, and operational effectiveness.
• Review emerging technologies and evolving risks to ensure audit coverage remains current and relevant.

• Promote the use of data analytics, automation, and continuous auditing techniques to improve audit quality and efficiency.
• Utilize analytical tools to identify trends, anomalies, and risk indicators that enhance audit insights.
• Support the implementation of innovative audit methodologies and technology-enabled audit solutions.
• Continuously evaluate opportunities to modernize audit processes and improve reporting capabilities.

• Prepare and present clear, executive-level audit reports that translate technical findings into meaningful business risks and recommendations.
• Build strong relationships with business leaders, technology teams, compliance, risk management, and external auditors.
• Mentor, coach, and develop junior audit professionals while fostering a culture of continuous learning and collaboration.
• Contribute to the enhancement of audit methodology, standards, and departmental best practices.
• Support the development of annual IT audit plans based on organizational risk assessments.

• Bachelor’s degree in Information Systems, Computer Science, Accounting, Finance, Cybersecurity, or a related field.
• 6–10 years of experience in IT audit, internal audit, public accounting, technology risk, or related disciplines.
• Strong expertise in IT General Controls (ITGC), SOX compliance, IT risk management, and internal control frameworks.
• Experience leading IT audit engagements and managing multiple projects simultaneously.
• Strong understanding of cybersecurity principles, cloud technologies, enterprise applications, and IT governance.
• Experience auditing ERP systems, with SAP experience strongly preferred.
• Familiarity with industry frameworks including COBIT, NIST, ISO 27001, and related governance standards.
• Experience using data analytics and audit technologies to enhance audit effectiveness.
• Strong analytical, organizational, and critical thinking skills.
• Excellent written and verbal communication skills with the ability to present complex technical risks to executive leadership.
• Demonstrated leadership, project management, and stakeholder engagement experience.

• Professional certifications such as Certified Information Systems Auditor (CISA), Certified Public Accountant (CPA), Certified Internal Auditor (CIA), Certified Information Systems Security Professional (CISSP), or equivalent.
• Experience implementing continuous auditing, automation, or data-driven audit methodologies.
• Proficiency with SQL, Power BI, Alteryx, or similar data analytics and visualization tools.
• Experience auditing cloud platforms, digital transformation initiatives, and enterprise technology implementations.
• Knowledge of regulatory compliance requirements related to information security, privacy, and technology governance.