IT Audit Manager

Kforce has a client in Tempe, AZ, seeking an IT Audit Manager. The role provides leadership and operational oversight for the client’s global IT control framework during a critical transformation and stabilization period. The Manager will strengthen governance, support audit readiness, drive remediation, and standardize IT controls across North American and European operations.

• Lead and enhance the global IT General Controls (ITGC) framework to support SOX 404 compliance.
• Drive IT control design, implementation, testing, and ongoing operational effectiveness reviews.
• Coordinate internal and external audit activities, including evidence collection, audit support, and issue resolution.
• Partner with technology and business leaders to identify risks, develop remediation plans, and track corrective actions to closure.
• Support global standardization and transformation of IT control frameworks, processes, and governance practices.
• Facilitate control owner education and provide guidance on compliance expectations, audit requirements, and best practices.
• Oversee governance processes, workflow management, and control documentation within enterprise GRC platforms.
• Develop and maintain reporting and metrics related to control effectiveness, audit findings, remediation progress, and risk exposure.
• Collaborate with stakeholders across multiple regions to improve governance maturity and operational consistency.
• Support implementation and optimization of GRC tools, including control mapping, workflow automation, and reporting capabilities.

• Bachelor's degree in Information Systems, Information Technology, Accounting, Business, or related field.
• 7+ years of experience in IT controls, IT audit, IT compliance, IT risk management, or IT governance.
• Experience assessing control design and evaluating operational effectiveness.
• Experience performing risk assessments and managing remediation programs.
• Experience mentoring control owners, operational teams, and compliance stakeholders.
• Experience working within complex, global organizations.
• Hands‑on experience with GRC platforms and governance workflows.
• Strong knowledge of SOX 404 requirements and IT General Controls (ITGCs).
• Demonstrated success coordinating with external auditors and audit stakeholders.
• Strong communication and stakeholder management skills, including the ability to influence leaders across technology and business functions.

• Experience leading global ITGC standardization or transformation initiatives.
• Experience implementing or enhancing GRC platforms and control frameworks.
• Experience utilizing data analysis and reporting tools to support risk and compliance activities.
• Knowledge of governance, risk management, and compliance best practices.

• CISA (Certified Information Systems Auditor)
• CRISC (Certified in Risk and Information Systems Control)
• CISSP (Certified Information Systems Security Professional)

The pay range is the lowest to highest compensation we reasonably expect to provide for this role. Pay may be modified in the future based on experience and business needs.

We offer comprehensive benefits including medical/dental/vision insurance, HSA, FSA, 401(k), and life, disability & ADD insurance to eligible employees. Salaried personnel receive paid time off. Hourly employees are not eligible for paid time off unless required by law. Hourly employees on a Service Contract Act project are eligible for paid sick leave.

This job is not eligible for bonuses, incentives or commissions.

Kforce is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status, or disability status.

By clicking “Apply Today” you agree to receive calls, AI‑generated calls, text messages or emails from Kforce and its affiliates, and service providers. If you choose to communicate via text messaging, the frequency may vary, and message and data rates may apply. You have the right to cease communicating via text by using the keyword STOP.