Director - Digital Technology Audit

Constellation Energy Generation, LLC.•Chicago, IL

2d•Onsite

About The Position

The Director, IT Internal Audit provides strategic risk leadership for the Company's technology and cybersecurity assurance program and serves as a key risk advisor on technology risk, cyber resilience, data governance, and digital transformation. This role is responsible for developing and executing a risk-based IT audit strategy, overseeing SOX IT assurance activities, advancing data-driven audit capabilities, and providing Management and the Chief Audit Executive with clear, decision-useful insights regarding emerging technology and cyber risks.

Requirements

Bachelor’s degree in Information Systems, Computer Science, Engineering, Accounting Finance, Business Administration, or a related field.
12+ years of progressive professional experience, including significant leadership responsibility within IT internal audit, technology risk management, cybersecurity, assurance, or a comparable control focused environment.
Demonstrated experience leading a team of risk-based IT auditors, risk assessments or major technology risk program across infrastructure, cybersecurity, cloud technologies, data management, identity and access management, disaster recovery, and IT-enabled business processes.
Significant experience evaluating and testing IT General Controls (ITGCs), automated controls, and technology controls supporting SOX compliance.
Demonstrated success developing and implementing digital transformation initiatives, audit analytics programs, automation solutions, or technology-enabled assurance capabilities.
Deep understanding of cybersecurity frameworks, technology risk management practices, and emerging technology risks, including cloud, cyber resilience, third-party risk, and data governance.
Proven ability to influence executive stakeholders and communicate complex technology and cyber risks in a clear, business-oriented manner.
Experience leading and developing teams, including managers and/or geographically dispersed teams.

Nice To Haves

Advanced degree.
Professional certification (e.g., CISA, CISSP, CIA, CPA, CRISC, CISM, PMP).
Experience leading technology risk assurance programs within a Fortune 500, energy, utility, or other highly regulated industry.
Experience developing and leveraging data analytics, automation, AI-enabled tools, or continuous auditing techniques within Internal Audit.
Familiarity with NIST Cybersecurity Framework, COBIT, ISO 27001, NERC CIP, and other relevant technology risk and cybersecurity frameworks.

Responsibilities

Own the end-to-end IT, cybersecurity and digital audit strategy and portfolio, ensuring comprehensive coverage of the enterprise's most significant technology, cyber, data, and IT-enabled business risks.
Develop and maintain a dynamic, risk-based audit plan informed by emerging threats, strategic initiatives, regulatory developments, technology transformation activities, and enterprise risk assessments.
Develop and lead enterprise wide IT audit and advisory engagements, establishing scope, objectives, and methodologies using a risk based approach aligned to business strategy, technology initiatives, and emerging IT and cybersecurity risks.
Oversee assurance activities related to IT General Controls (ITGCs), application controls, cybersecurity, identity and access management, cloud technologies, data governance, resilience, and IT-enabled business processes.
Drive initiatives to optimize technology controls and reduce total cost of risk management.
Serve as the functional owner for Internal Audit's digital and analytics strategy, establishing a roadmap to increase automation, continuous monitoring, data-driven assurance, and scalable audit execution.
Evaluate and implement audit technologies, advanced analytics, artificial intelligence use cases, and data-enabled risk assessment capabilities that enhance audit effectiveness and efficiency.
Champion innovative approaches to risk identification and audit delivery through the strategic use of technology and data.
Serve as a strategic advisor to the CIO, CISO, Digital leadership, and other senior stakeholders on technology risk, cyber resilience, governance, and control effectiveness.
Translate complex technology and cybersecurity risks into concise and actionable insights for Executive Management and the Audit Committee.
Build strong partnerships across Internal Audit, Enterprise Risk Management, Compliance, Security, and external assurance providers to ensure coordinated risk coverage.
Develop, coach, and lead a high-performing team of IT audit, cybersecurity, and analytics professionals while fostering innovation, technical excellence, and continuous improvement across the Internal Audit function.