IT Internal Audit Manager

Department: Finance

Employment Type: Full Time

Location: US-Arizona-Tempe-Corp HQ

IT Internal Audit Manager

Internal Audit‘s vision is be a trusted business advisor as it relates to our areas of expertise:
Governance, Risk, and Control. We do this by monitoring the risk environment across Align and providing insights to enable effective risk management. As well as evaluate the efficiency, effectiveness and maturity of our processes and systems. We work closely with teams and leadership to achieve a strong control environment that enhances and protects organizational value. We serve the entire company from a compliance perspective and staff and develop our team to be control experts who deliver objective and reliable results.

Position Summary

Reporting to the VP of Global Internal Audit , the IT Internal Audit Manager leads the technology audit portfolio globally and serves as the department’s subject matter expert on IT, cybersecurity, and data. This leader plans and executes IT general controls (ITGC) and application control testing in support of SOX, delivers risk-based technology and cybersecurity audits, and advises on transformation initiatives where technology, data, and automation drive the outcome.

The role blends deep technical audit expertise with business partnering: the successful candidate is equally comfortable challenging a cloud configuration, reviewing major ERP transformations, including relevant SDLC controls and briefing executives and the Audit Committee in plain language.

• Develop and maintain the annual IT audit plan using a risk-based approach, refreshed for emerging technology, cyber, and regulatory risk; align the plan with the enterprise risk management (ERM) program and the broader internal audit plan.
• Scope, lead, and deliver IT audits end to end — planning, risk and control matrices, fieldwork, issue development, reporting, and follow-up — in accordance with the IIA Global Internal Audit Standards.
• Lead audits across domains including cybersecurity, cloud (AWS/Azure/SaaS), identity and access management, change and release management, IT operations and resiliency, data privacy, IT third-party/vendor risk, and major system implementations and ERP transformations.
• Perform pre- and post-implementation reviews of significant technology programs, providing independent assurance on project governance, data conversion, cutover readiness, and control design.

• Own the IT scope of the SOX program: ITGC scoping and risk assessment, control design evaluation, test plan development, testing execution, deficiency evaluation, and aggregation of IT findings with the financial statement audit.
• Evaluate and advise on automated controls, IT-dependent manual controls, key reports, and interface/data integrity controls within SAP and adjacent platforms.
• Coordinate directly with external auditors and process owners on scoping, reliance, evidence, and remediation timelines; drive efficiency through control rationalization and reliance strategies.
• Assess the control implications of emerging technologies, including AI/automation use cases, and advise management on appropriate governance, human oversight, and monitoring.

• Provide independent assessment of the information security program against recognized frameworks (NIST CSF, ISO 27001, CIS Controls), including vulnerability and patch management, logging and monitoring, incident response, and security awareness.
• Cultivate a collaborative, non-adversarial relationship with the CISO and Info Sec leadership; align audit coverage with the security roadmap while preserving…