Director IT Audit; Mobility

About the Role:

Director IT Audit – a senior internal audit leader who owns the organization’s technology audit program. Reporting to the Chief Audit Executive, this role serves as the audit liaison to the CIO and CISO, providing independent assurance over the technology controls, cybersecurity, privacy posture, and IT governance frameworks that underpin the business.

• Design, own, and execute a comprehensive IT audit strategy and annual audit plan based on a robust IT risk assessment.
• Lead IT general controls and IT application testing for SOX compliance, ensuring controls are effectively designed and operate as required.
• Lead non‑SOX IT and operational technology audits covering cybersecurity, privacy, cloud infrastructure, data governance, third‑party/vendor risk, IT change management, access management, and business continuity.
• Act as the primary internal audit liaison for the CIO and CISO, providing regular updates and independent risk insights.
• Communicate audit findings to executive leadership and the Audit Committee, translating technical results into clear business risk language.
• Collaborate with external auditors on SOX IT audit coordination, reliance strategies, and control testing.
• Monitor remediation of audit findings, ensuring sustainable resolution.
• Stay ahead of evolving technology risk such as AI governance, cloud security, ransomware, and regulatory developments.
• Build and lead a high‑performing global IT audit team, fostering technical skills and effective communication.
• Lead the development of AI‑driven and automated audit processes to improve quality, efficiency, and scalability.

• Bachelor’s degree in Information Systems, Computer Science, Accounting, or a related field (advanced degree preferred).
• 10+ years of IT audit experience, with at least 4 years in an IT audit leadership role.
• Strong public accounting background (Big
  4) or equivalent preferred.
• Active audit‑related professional certification required (CISA, CISSP, CPA, CIA, etc.); CISA or CISSP preferred.
• Expertise in IT general and application controls, SOX ITGC compliance, and risk‑based audit methodologies.
• Technical knowledge across cybersecurity, cloud platforms, access management, data governance, and IT infrastructure.
• Proven experience partnering directly with CIO and CISO‑level stakeholders while maintaining audit independence.
• Ability to translate complex technical findings into concise, business‑relevant narratives for executive and board audiences.
• Experience leading non‑SOX technology audits such as cybersecurity assessments, vendor/third‑party risk reviews, and cloud control evaluations.

• IT audit program is risk‑driven, respected, and considered a value‑adding function by business leaders.
• SOX ITGC audits are executed with precision, reducing duplication and increasing efficiency.
• Audit findings are written in clear language that business leaders can act upon.
• IT audit team is technically sharp, credentialed, and recognized as a best‑in‑class function.
• Team is high‑performing, engaged, and proud of its impact.

S&P Global Mobility is a global data‑driven mobility solution provider dedicated to supporting automotive and other industries with actionable insights and future‑ready technologies.

We are an equal opportunity employer and encourage applications from all qualified candidates irrespective of race, color, religion, sex, gender identity, age, disability, or veteran status.