IT Audit Manager

IT Audit Manager Responsibilities

• Manage day‑to‑day IT audit activities, including managing IT resources, executing risk‑based IT SOX testing, performing internal audits, and leading audit automation and data analytics initiatives.
• Manage the annual SOX IT scoping process, including identification of in‑scope systems, key reports, and IT dependencies supporting financial reporting.
• Lead walkthroughs, design (TOD) and effectiveness (TOE) testing for SOX IT general controls and application controls.
• Coordinate with external auditors on IT SOX reliance strategy, integrated audit approach, and PBC deliverables.
• Track and report on IT control deficiencies.
• Advise on control design for new or significantly changed systems and processes impacting financial reporting.
• Drive automation of repeatable SOX testing processes to reduce manual effort and reliance on business stakeholders for data.
• Develop and maintain a disciplined, risk‑based IT audit scope, ensuring audit resources are focused on the highest‑priority risk areas.
• Plan, lead, and execute risk‑based IT internal audits, including operational IT audits, cybersecurity reviews, NIST assessments, and other non‑SOX IT audit engagements.
• Communicate audit results, risk ratings, and remediation recommendations to IT and business leadership.
• Champion adoption of audit automation, RPA, and AI‑assisted techniques within the Internal Audit function.
• Partner with IT and business intelligence teams to ensure audit function has access to usable data, reducing dependency on the business for audit evidence gathering.
• Develop automated scripts and workflows to test large user access datasets, configuration parameters, and system logs.
• Build repeatable analytics solutions that increase audit coverage across ERP and ancillary systems.
• Serve as the team's subject matter expert on data‑driven audit methodologies.
• Partner with IT, Cybersecurity, and Compliance teams to identify emerging technology risks and align audit coverage accordingly.
• Provide advisory input on major technology initiatives, system implementations, and digital transformation projects.
• Monitor the technology risk landscape and adjust the audit plan proactively.
• Collaborate with the broader Internal Audit team on integrated audits that span IT and business/operational risk areas.
• Direct and manage IT audit resources on a day‑to‑day basis.
• Contribute to annual IT audit plan development and departmental strategic initiatives.
• Support future recruitment and onboarding of IT audit talent as the function grows; build a high‑performing, technology‑forward audit team.

Required

• Bachelor's degree in Information Systems, Computer Science, Accounting/Finance, or related field.
• 5+ years of current, hands‑on IT audit experience.
• Deep knowledge of IT general controls, IT application controls, and ITGC/SOX frameworks.
• Experience performing broad range of IT internal audits beyond SOX, including operational IT audits, cybersecurity reviews, and NIST assessments.
• Hands‑on SOX IT controls experience, including coordination with external auditors.
• Demonstrated experience with data analytics tools.
• Proven track record of driving audit automation or continuous monitoring initiatives.
• Solid understanding of cybersecurity concepts, network architecture, and access management.
• Strong knowledge of regulatory standards including COBIT, NIST, COSO, and IIA.
• Excellent communication skills, with the ability to explain technical risks to non‑technical audiences.

Preferred

• CISA (Certified Information Systems Auditor) – strongly preferred.
• Experience in manufacturing, construction, or other industrial environment.
• Familiarity with Microsoft Dynamics.
• Proficiency in Python or SQL for large‑scale data testing and automation scripts.
• Knowledge of emerging technologies: AI/ML governance, robotic process automation (RPA), data lakes.

Equal Employment Opportunity

The IES policy on equal employment opportunity prohibits discrimination based on race, color, religion, national origin, sex, age, gender identity, sexual orientation, individuals with disabilities, protected veterans, or any other protected status or characteristic. This policy…