IT Audit Director - Cyber, AI and Cloud

IT Audit Director – Cyber, AI and Cloud

Washington, DC or Reston, VA

In this leadership position, you will lead efforts examining and analyzing Fannie Mae's IT environment, with a focus on cloud services, artificial intelligence, cyber security, IT governance, resiliency, operating systems, and technology platforms.

This is a highly hands-on leadership role. You will take ownership of complex IT audits and reviews, setting direction while remaining directly involved throughout planning, testing, execution, and reporting. You will also coach and mentor other members of the audit team.

• Apply specialized technical expertise to direct and oversee audits in complex areas including AI, cyber security, resiliency, and cloud infrastructure.
• Identify technology risks, assess their potential impact, and adjust audit plans based on areas requiring additional analysis.
• Participate in annual audit planning focused on current and emerging IT risks.
• Lead complex IT audits from planning through execution and reporting.
• Conduct hands-on testing of highly complex technical areas with a focus on the highest-risk issues.
• Conduct technical walkthroughs and communicate directly with technical business leads and teams.
• Provide day-to-day project management, guidance, coaching, and feedback to other IT auditors.
• Develop innovative testing approaches and review audit work.
• Create points of view on emerging risks including AI, cyber security, and resiliency.
• Serve as a technical subject matter resource and coach junior staff.
• Build and maintain relationships with business partners, management teams, auditors, and technology leaders.
• Develop innovative ways to use data analytics, automation, and AI in audit testing.
• Perform data analytics and testing directly while helping junior staff develop related capabilities.
• Prepare audit reports and present findings to management.

• 8+ years of experience in IT Audit, IT Risk Management, or Information Security
• Expert knowledge of cyber security, artificial intelligence, or cloud infrastructure technologies such as AWS
• Strong project management skills
• Prior experience coaching and providing feedback to audit staff
• Excellent written and verbal communication skills with the ability to communicate effectively with technical experts
• Strong data analytics and visualization skills
• Experience with visualization tools such as Power BI, Tableau, Plotly, or Seaborn
• Coding and data analytics experience using Python, including tools such as Sci Py, Num Py, and/or Py Spark
• Experience using AI solutions to improve audit effectiveness and efficiency
• Demonstrated experience auditing AI solutions and related risks
• Knowledge of agentic AI architectures and risks
• Hands-on experience conducting complex technical audits, walkthroughs, and testing

• Deep technical expertise in IT audit, cyber security, AI, cloud infrastructure, systems architecture, or information security
• Ability to lead complex IT audits while remaining hands-on throughout planning, testing, execution, and reporting
• Experience identifying technology risks and developing risk-based audit strategies
• Strong knowledge of cloud infrastructure and enterprise technology environments
• Experience with data analytics, automation, and AI-assisted audit techniques
• Strong critical thinking and technical problem-solving skills
• Experience managing audit projects and providing direction to audit team members
• Experience coaching and mentoring audit staff
• Formal people management experience
• Ability to communicate technical audit findings to management, technology leaders, and business stakeholders

• 10+ years of experience in IT Audit, IT Risk Management, or Information Security
• 5+ years of IT Audit experience
• Internal audit experience within a large, complex organization
• Bachelor's degree or equivalent experience
• Master's degree and/or MBA in Computer Science, Information Systems, Cyber Security, Mathematics, or a related field
• CISA, CISSP, CEH, CRISC, and/or CISM certification
• Experience auditing AI, cloud, cyber security, resiliency, infrastructure, and emerging technology risks
• Director or Manager-level experience in infrastructure, cyber, or technology audit