IT Audit Manager
Key Responsibilities
- Lead and execute end-to-end technology audit engagements covering cybersecurity, cloud computing, infrastructure, data management, technology governance, software development, and related risk areas.
- Perform risk assessments to identify key areas of exposure and help develop audit coverage plans.
- Develop audit scopes, testing strategies, and risk-based audit programs tailored to complex technology environments.
- Evaluate the effectiveness of technology controls and identify opportunities to strengthen governance, security, and operational resilience.
- Conduct walkthroughs, interviews, and testing procedures with technology, security, operations, and business stakeholders.
- Assess risks associated with modern technologies including cloud platforms, AI-enabled solutions, APIs, digital transformation initiatives, and third-party technology providers.
- Draft clear, concise audit observations and communicate findings to management and senior stakeholders.
- Monitor remediation efforts and validate the effectiveness of corrective actions.
- Contribute to the continuous enhancement of audit methodologies, reporting practices, and risk assessment processes.
- Utilize data analytics and technology-enabled audit techniques to improve audit effectiveness and identify emerging risks.
Desired Background
- 5+ years of experience within Internal Audit, Technology Audit, IT Risk, or Technology Controls environments.
- Experience executing risk-based audits within a formal Internal Audit function (3rd Line of Defense preferred).
- Strong understanding of technology risk management and control frameworks.
- Hands-on experience auditing one or more of the following:
- Cybersecurity programs
- Cloud platforms (AWS, Azure, GCP)
- Application security
- APIs and integrations
- Infrastructure and network environments
- Change management processes
- Data governance and data controls
- Software development lifecycle (SDLC)
- Ability to independently manage audit engagements from planning through reporting.
- Experience performing risk assessments, developing audit programs, documenting findings, and validating remediation activities.
- Strong communication and stakeholder management skills.
- Ability to challenge stakeholders constructively and influence control enhancements.
Preferred Qualifications
- CISA, CISSP, CRISC, CIA, or similar professional certification.
- Experience within Asset Management, Financial Services, Insurance, Consulting, or Corporate Internal Audit environments.
- Exposure to cloud security concepts, cyber risk frameworks, or emerging technologies.
- Experience leveraging analytics tools such as Power BI, Tableau, Alteryx, ACL, IDEA, or similar platforms.
- Familiarity with AI governance, digital transformation programs, and evolving technology risk trends.
FAQs
Congratulations, we understand that taking the time to apply is a big step. When you apply, your details go directly to the consultant who is sourcing talent. Due to demand, we may not get back to all applicants that have applied. However, we always keep your resume and details on file so when we see similar roles or see skillsets that drive growth in organizations, we will always reach out to discuss opportunities.
Yes. Even if this role isn’t a perfect match, applying allows us to understand your expertise and ambitions, ensuring you're on our radar for the right opportunity when it arises.
We also work in several ways, firstly we advertise our roles available on our site, however, often due to confidentiality we may not post all. We also work with clients who are more focused on skills and understanding what is required to future-proof their business.
That's why we recommend registering your resume so you can be considered for roles that have yet to be created.
Yes, we help with resume and interview preparation. From customized support on how to optimize your resume to interview preparation and compensation negotiations, we advocate for you throughout your next career move.