Director, Cyber Security & IT Audit - Program Office

MoneyGram

4d•$180,000 - $250,000•Remote

About The Position

MoneyGram is seeking a Director of Cybersecurity & IT Audit to join its Internal Audit team. The role is responsible for defining, assessing, and executing the Cybersecurity & IT Audit plan in accordance with professional best practices, and for helping the Vice President, IA and the leadership team drive function-wide transformation and set the team's strategic direction. The Director will shape enterprise IT risk management and cybersecurity assurance by offering forward-looking insights, challenging existing approaches, and advancing innovation in audit practices and IT governance. The Director will develop and execute a Cybersecurity and IT audit strategy aligned with business objectives and risk exposures; lead risk assessments and audits and advisory reviews across technology domains; and lead the IT SOX program. The role partners with Cyber & IT leaders, provides independent risk and control perspectives on governance and major technology initiatives, and communicates complex risks to senior management and the Audit Committee. It also manages audit budgets and resources, supports the development of audit talent, and drives continuous improvement through risk-based methods, data analytics, automation, and AI-enabled audit techniques.

Requirements

10–15 years of experience in Cybersecurity and IT Audit, including risk assessment, control evaluation, hands-on audit execution, and strategic advisory across IT environments.
Strong knowledge of cybersecurity and technology frameworks, including NIST CSF, ISO 27001, and COBIT, and EU and UK requirements such as DORA, NIS2, GDPR, and the EU AI Act.
Strong IT SOX experience, including ITGC scoping, oversight of third-party testing, and external auditor reliance.
Strong understanding of cybersecurity and technology risks, including ITGCs, cloud security, identity and access management, data protection and privacy, encryption, vulnerability management, network security, incident response, technology resilience, third-party risk, and AI and emerging technologies.
Strong leadership and people skills, including experience developing talent, driving continuous improvement, and building trusted relationships across all levels of an organization.

Nice To Haves

CISSP, CISA, CIA, CISM, or CRISC certification.

Responsibilities

Develop and execute a Cybersecurity and IT audit strategy aligned with business objectives and an understanding of business risks.
Lead cybersecurity and IT risk assessments, define risk-based audit programs, and plan, execute, and report on audits and advisory reviews across cybersecurity, IT, cloud, data protection and privacy, identity and access management, technology resilience, third-party technology risk, AI, and emerging technologies.
Lead the IT SOX program, including ITGC risk assessment and scoping, control design, oversight of co-sourced testing, and coordination of reliance with external auditors.
Serve as a strategic partner and advisor to Cyber & IT leaders on risk and control matters, and align on priorities and the scoping, planning, and execution of work.
Provide independent risk and control perspectives on IT governance, cybersecurity posture, and major technology initiatives, including implementations and upgrades, cloud migrations, digital transformation, AI, and emerging technologies.
Translate complex cybersecurity and technology risks into clear, business-focused insights for senior management and the Audit Committee.
Manage the Cybersecurity & IT audit budget and resources, including co-source and specialist support, and help build and develop audit talent.
Drive innovation and continuous improvement in Internal Audit, including risk-based methodology, data analytics, automation, and AI-enabled audit techniques.
Assist the Vice President, IA and leadership team in driving function-wide transformation programs and the strategic direction of the team.