Director IT Audit

Norwegian Cruise Line•Miami, FL

About The Position

Norwegian Cruise Line Holdings is seeking a Director IT Audit to lead the company’s IT audit activities and develop a risk-based IT Audit Plan. The role covers SOX testing, IT and shipboard audits, integrated audits, ERM reviews, application and system implementation reviews, technical security reviews, ethics investigations, and assignments requested by senior management. The Director helps facilitate enterprise risk management with a focus on significant IT risks, including cybersecurity and keeping pace with technology. The position builds relationships across IT leadership, corporate functions, shipboard operations, and shared services to identify risks and support practical solutions and high-priority projects. It also promotes responsible AI-enabled and data-driven transformation by advancing automation, analytics, and continuous monitoring that improve efficiency, controls, and the reliability of financial and operational information. The Director serves as Internal Audit’s key IT Audit contact for staff, management, consultants, and external auditors; reviews audit and SOX documentation; recommends process and control improvements; and prepares, reviews, and presents reports to senior management. The role also coordinates co-source providers and external auditors and works with business units to strengthen internal controls and support profit maximization. Other duties and projects may be assigned.

Requirements

Bachelor’s degree in Accounting or an IT-related field.
At least 8 years of IT Audit experience, including experience working for a large public accounting firm and extensive Sarbanes-Oxley experience in a publicly traded company.
Supervisory management experience.
Advanced knowledge of IT audit testing and documentation, including ITGCs and business application controls, as well as accounting and business operations.
Significant experience and knowledge of IT operations, infrastructure (networks, databases, and operating systems), cybersecurity, data analytics, applications, and emerging technologies.
Strong analytical, written, and verbal communication skills.
Track record of conducting technology audits and advising and influencing stakeholders on IT control design, implementation, and application.
Strong business acumen and interest in the cruise industry, including understanding or awareness of current industry issues and risks.
Ability to work with all levels of management and explain business risks in understandable terms.
Inquisitive mindset and critical-thinking skills.
Ability to influence and motivate teams and develop talent.
Ability to work under minimal supervision, manage deadlines, drive projects to completion, escalate roadblocks promptly, keep leaders informed, and assist with reviewing other team members’ work.
Ability to work effectively and promote inclusiveness in small groups.
Ability to use data to support audit conclusions.
Strong project management skills, including planning, implementing, monitoring, and completing projects while managing scope, resources, time, cost, quality, risk, and communications.
Ability to continually seek ways to enhance performance, improve results, or transform the business and industry.
Strategic thinking, including weighing different perspectives and options and producing mutually agreeable solutions.
Ability to adapt to ambiguous or changing situations and work with diverse individuals and groups.
Ability to listen and communicate openly, honestly, and respectfully with different audiences, promote dialogue, and build consensus.

Nice To Haves

Professional certification such as Certified Information Systems Auditor (CISA), Certified Public Accountant (CPA), or Certified Internal Auditor (CIA).

Responsibilities

Develop the IT Audit Plan based on risk assessment, considering quantitative and qualitative factors and emphasizing risk mitigation, operational efficiency, revenue enhancement, and cost minimization.
Lead SOX testing, including ITGCs, business application controls, and key reports and spreadsheets, as well as IT audits, shipboard audits, integrated audits, ERM reviews, application reviews, system implementation reviews, technical security reviews, ethics investigations, and ad hoc assignments.
Help facilitate ERM on behalf of the ERM Steering Committee and Audit Committee, focusing on significant IT risks such as cybersecurity and technology change.
Build and maintain relationships across IT leadership, corporate functions, shipboard operations, and shared services to identify emerging risks, influence solutions, and support high-priority projects.
Advance responsible AI-enabled and data-driven transformation, including automation, analytics, and continuous monitoring solutions.
Serve as Internal Audit’s key IT Audit point of contact for staff, management, consultants, and external auditors.
Review audit and SOX documentation, including planning, audit and SOX programs, testing, remediation, and final reporting.
Recommend process and control improvements based on IT risk assessments and process evaluations.
Prepare, review, and present written reports to senior management based on audit and SOX results.
Facilitate the work of co-source providers and external auditors.
Work with business units to promote operating practices that support effective internal controls and profit maximization.
Perform other duties and projects as assigned.