Director, RAAS - Technology

Holland America Group•Miami, FL

8d•Remote

About The Position

The Director of IT Audit is responsible for leading and managing the organization’s IT audit function, ensuring the integrity, security, and compliance of technology systems and processes. This role provides assurance to the Board of Directors and oversees risk assessments, audit planning, execution, and reporting for IT-related controls, cybersecurity, data governance, and emerging technologies. The Director will partner with global senior leadership to provide strategic insights and recommendations that strengthen IT governance and risk management.

Requirements

Bachelor’s degree in Information Technology, Computer Science, Accounting, or related field; Master’s degree preferred.
Professional certifications such as CISA, CISM, CISSP, or CIA strongly preferred.
10+ years of progressive experience in IT audit, risk management, or cybersecurity, including at least 5 years in a leadership role.
Deep knowledge of IT governance frameworks (e.g., COBIT, NIST, ISO 27001).
Strong understanding of cloud technologies, cybersecurity, data analytics, and emerging tech risks.
Excellent communication, leadership, conflict resolution, and stakeholder management skills.
Strategic thinking and ability to align IT audit with business objectives.
Strong analytical and problem-solving skills.
Ability to influence and drive change across complex organizations.
High integrity and commitment to ethical standards.
Ability to coach / develop a diverse team of professionals
Sound IT risk and control understanding (including the ability to design tests of controls)
Extensive experience navigating 'politically' sensitive topics with C-Level / Sr. Management.

Responsibilities

Oversee the Global Technology RAAS team in the execution of independent reviews and evaluations of all technology-related operations and activities to assess:
The reliability and integrity of internal controls over and financial reporting for systems that authorize transactions and safeguard assets.
Compliance with policies, laws, and regulations which could have significant impact upon IT operations and processes.
The effectiveness and efficiency of IT operations.
Perform team member evaluations and establish development plans
Establish an environment that fosters team collaboration, innovation, ownership and positive culture.
Conduct meetings with Sr. Management to discuss audit results and associated management actions to mitigate identified control gaps.
Document results of audits in formal reports that are distributed to Sr. Brand and Corporate Management
Provide management regular updates on audit status, control enhancement opportunities,
Create quarterly exhibits (documenting audit results) for the Board of Directors
Engage with and build professional relationships with senior leadership across the Company (e.g., RAAS, Corporate and Brand IT, Brand Business Management, etc.) to keep abreast of risks and changes in the IT environment to ensure audit resources and audit coverage is aligned with areas of higher risks.
Develop and maintain effective engagement with the external auditors to provide support with the integrated annual audit (including SOX) and IT controls assessment across the Brands. Assist in escalating associated issues to Corporate and Brand Management
Oversee the execution of the annual Global IT SOX Assessment, including driving changes to enhance efficiencies and effectiveness of testing.
Develop a program to test the design and operating effectiveness of SOX controls, identifying and reporting findings (to Sr. Management and SOX Committees) on a timely basis, and overseeing the development/effectiveness of Management’s remediation plans.
Provide Sr. Management insights and perspectives on proposed control enhancements on basis and overseeing the development/effectiveness of Management’s remediation plans. Provide Sr. Management insights and perspectives on proposed control enhancements.
Defines IT Audit strategy and associated supporting programs:
Conduct annual IT Audit Risk Assessment and develop the associated IT Aduit Plan
Schedule and deploying IT Audit resources to assess and advise on global IT risks
Leverage technology (e.g., IA, Data Analytics, audit tools) to increase effectiveness and efficiency of IT risk coverage
Develop a strategy to utilize limited IT resources to support other RAAS teams (Fin/Ops, Maritime)
Link overall IT strategy with RAAS departmental strategy to ensure effective risk coverage
Analyze internal trends, audit results and industry trends to ensure effective risk coverage

Benefits

Cost-effective medical, dental and vision plans
Employee Assistance Program and other mental health resources
Additional programs include company paid term life insurance and disability coverage
401(k) plan that includes a company match
Employee Stock Purchase plan
Holidays – All full-time and part-time with benefits employees receive days off for 8 company-wide holidays, plus 2 additional floating holidays to be taken at the employee’s discretion.
Vacation Time – All full-time employees at the manager and below level start with 14 days/year; director and above level start with 19 days/year. Part-time with benefits employees receive time off based on the number of hours they work, with a minimum of 84 hours/year. All employees gain additional vacation time with further tenure.
Sick Time – All full-time employees receive 80 hours of sick time each year. Part-time with benefits employees receive time off based on the number of hours they work, with a minimum of 60 hours each year.
Complementary stand-by cruises, employee discounts on confirmed cruises, plus special rates for family and friends
Personal and professional learning and development resources including tuition reimbursement
On-site Fitness center at our Miami campus