Director IT Audit

Norwegian Cruise Line Holdings Ltd.•Miami, FL

About The Position

The Director IT Audit leads Norwegian Cruise Line Holdings’ IT audit function, developing a risk-based audit plan and overseeing IT audits, SOX testing, shipboard and integrated audits, ERM reviews, application and system implementation reviews, technical security reviews, ethics investigations, and ad hoc assignments. The role supports the Company’s ERM Steering Committee and Audit Committee on significant IT risks, including cybersecurity and keeping pace with technology. The Director builds trusted relationships across IT leadership, corporate functions, shipboard operations, and shared services; advises stakeholders on practical risk mitigation and control solutions; and serves as Internal Audit’s primary IT Audit contact for staff, management, consultants, and external auditors. The role also advances responsible AI-enabled and data-driven transformation by identifying automation, analytics, and continuous monitoring opportunities. The Director reviews audit and SOX documentation, recommends process and control improvements, prepares and presents reports to senior management, and coordinates co-source providers and external auditors. The position also works with business units to promote effective internal controls and profit maximization.

Requirements

Bachelor’s degree in Accounting or an IT-related field of study.
At least 8 years of IT Audit experience.
Experience working for a large public accounting firm.
Extensive Sarbanes-Oxley experience in a publicly traded company.
Supervisory management experience.
Advanced knowledge of IT audit testing and documentation, including ITGCs and business application controls, as well as accounting and business operations.
Significant knowledge of technology domains including IT operations, infrastructure (networks, databases, and operating systems), cybersecurity, data analytics, applications, and emerging technologies.
Strong analytical, written, and verbal communication skills.
Proven experience conducting technology audits and advising and influencing business stakeholders on IT control design, implementation, and application.
Strong business acumen and interest in the cruise industry, with understanding or awareness of current issues and risks it faces.
Ability to work with all levels of management and communicate business risks in understandable terms.
Inquisitive mindset and ability to apply critical thinking.
Ability to influence and motivate teams and develop talent.
Ability to operate with minimal supervision and oversight, manage deadlines, drive projects to completion, escalate issues or roadblocks promptly, keep leaders informed, and assist in reviewing other team members’ work.
Ability to work successfully and promote inclusiveness in small groups.
Ability to use data to support audit conclusions.
Strong project management skills, including planning, implementing, monitoring, and completing projects while managing scope, resources, time, cost, quality, risk, and communications.
Continually seek ways to enhance performance, improve results, or transform the business and industry.
Ability to think strategically, evaluate different perspectives and options, and produce mutually agreeable solutions.
Ability to adapt to ambiguous or changing situations and work with diverse individuals and groups.
Ability to listen and communicate openly, honestly, and respectfully with different audiences, promote dialogue, and build consensus.

Nice To Haves

Professional certification such as Certified Information Systems Auditor (CISA), Certified Public Accountant (CPA), or Certified Internal Auditor (CIA) is strongly preferred.

Responsibilities

Develop the IT Audit Plan based on a risk assessment and quantitative and qualitative factors, emphasizing risk mitigation, operational efficiencies, revenue enhancement, and cost minimization.
Lead IT audits, including SOX testing of ITGCs, business application controls, key reports and spreadsheets; IT, shipboard, and integrated audits; ERM reviews; application reviews; system implementation reviews; technical security reviews; ethics investigations; and ad hoc assignments.
Help facilitate ERM on behalf of the Company’s ERM Steering Committee and Audit Committee, focusing on significant IT risks such as cybersecurity and keeping pace with technology.
Build and maintain relationships across IT leadership, corporate functions, shipboard operations, and shared services to identify emerging risks, influence practical solutions, and support high-priority projects.
Advance responsible AI-enabled and data-driven transformation within Internal Audit and in partnership with other departments, identifying automation, analytics, and continuous monitoring solutions.
Serve as Internal Audit’s key IT Audit contact for staff, management, consultants, and external auditors.
Review audit and SOX documentation, including planning, audit and SOX programs, testing, remediation, and final reporting.
Recommend process and control improvements based on IT risk assessments and process evaluations.
Prepare, review, and present written reports to senior management based on audit and SOX results.
Facilitate the work of co-source providers and external auditors.
Work proactively with business units to promote operating practices that support effective internal controls and profit maximization.
Perform other duties and projects as assigned.