Director, Technology Risk Assurance

NeighborWorks America•Washington, DC

1d•$140,000 - $158,000•Hybrid

About The Position

NeighborWorks America is a national, nonpartisan nonprofit organization dedicated to making every community a place of opportunity for over 45 years. Our network comprises nearly 250 organizations across all states, the District of Columbia, and Puerto Rico. We provide grant funding, peer exchange, technical assistance, evaluation tools, and professional learning, serving as the nation's leading trainer for housing and community development professionals. Our network organizations support their communities through affordable housing, financial counseling, resident-led community building, and partnerships in health, employment, and education. We are committed to building a high-performing work culture guided by core values of accountability, integrity, curiosity, courage, respect, and collaboration. This role serves as a strategic advisor on technology, cybersecurity, AI, and regulatory risk. Reporting to the Chief Audit Executive, the Director of Technology Risk Assurance leads the organization's technology risk assurance activities. This includes identifying and assessing technology risk, cybersecurity, cloud, data governance, AI governance, and information assurance audit activities. The Director will develop and execute a risk-based technology audit strategy and a multi-year technology risk assurance roadmap to provide independent assurance on the effectiveness of governance, risk management, and internal controls across the organization's technology environment. The position is the primary subject matter expert for technology-related risks, offering strategic guidance to the Chief Audit Executive on cybersecurity, cloud computing, infrastructure, application controls, emerging technologies, artificial intelligence, and regulatory compliance. The Director will utilize data analytics, continuous auditing techniques, and AI-enabled audit tools to enhance audit efficiency and effectiveness, ensuring alignment with professional standards and leading frameworks such as NIST, COBIT, COSO, AI governance frameworks, and IIA standards.

Requirements

Bachelor’s degree in computer science, cyber-security, Accounting, Business Administration, Information Systems Management, or other related fields (Master's degree preferred) and/or equivalent work experience.
Minimum 8 years of progressive experience conducting IT audits, cybersecurity assessments, technology risk reviews, or information assurance engagements.
Minimum 5 years leading technology audit engagements.
Experience evaluating cybersecurity programs, technology governance, and emerging technology risks.
Experience presenting audit results to executive management.
Experience working in or with Internal Audit functions adhering to IIA Standards.
Certified Information Systems Auditor (CISA)
Extensive knowledge of: NIST Cybersecurity Framework, COBIT, COSO Internal Control Framework, AI Governance Frameworks, IT General Controls (ITGCs), Application Controls, Identity and Access Management, Cloud Security, Cybersecurity Governance, Data Governance, Vendor Risk Management, Business Continuity and Disaster Recovery
Exceptional written and verbal communication skills.
Strong interpersonal and presentation skills, sufficient to build effective internal relationships.
Ability to translate highly technical issues into business-focused observations and recommendations.
Ability to leverage technology to improve audit effectiveness and coverage.
Microsoft Office Suite, Teammate (Preferred), Data Analytics tools (TM Analytics, SQL or similar) cloud Platforms (Azure, AWS, Google Cloud).

Nice To Haves

Master's degree in information systems, Cyber security, accounting, business administration, data analytics or related field.
Experience auditing cloud-based environments (AWS, Azure, Google Cloud)
Certified Internal Auditor (CIA)
Certified Information Systems Security Professional (CISSP)
Certified in Risk and Information Systems Control (CRISC)
Certified Cloud Security Professional (CCSP)
Certified Information Security Manager (CISM)
Experience conducting Cloud, cybersecurity, AI governance and digital transformation audits.
Experience implementing continuous auditing and continuous monitoring programs.
Some knowledge of affordable housing or community development industries is helpful but not required.

Responsibilities

Lead the development and execution of a comprehensive risk-based Technology Risk Assurance program, including cybersecurity, cloud, data governance, artificial intelligence, and IT governance audits.
Collaborate with the Chief Audit Executive to identify emerging technology risks and incorporate them into annual and strategic audit plans. Develop recommendations regarding long-term technology risk assurance priorities and audit coverage.
Evaluate the effectiveness of IT governance, cybersecurity, privacy, resilience, disaster recovery, cloud security, identity management, and technology risk management controls.
Assess compliance with applicable standards and frameworks including NIST, COBIT, COSO, ISO 27001, CIS Controls, and industry best practices.
Provide assurance over AI governance, responsible AI practices, model risk management, and compliance with emerging AI regulations and frameworks.
Prepare and present technology audit results, emerging risk assessments, and key observations to executive leadership and for the Audit Committee as appropriate.
Leverage technology, data analytics, automation, and AI tools to enhance audit coverage and efficiency.
Engage in enterprise-wide technology risk assessments and provide recommendations to strengthen governance, risk management, and internal controls. Partner with business and technology leaders to promote effective risk management practices across the organization.
Monitor remediation activities and validate management action plans related to technology audit observations (findings).
Liaise with external auditors and the corporation’s information technology and services security as necessary. Lead outsourced and co-sourced technology internal audits. Provide oversight, direction, and performance feedback to external consultants and audit resources assigned to technology assurance projects.
Provides functional leadership and oversight of co-sourced technology audit resources, external consultants, and project teams. May supervise internal technology audit staff as organizational needs evolve.
Maintain and enhance technology audit methodologies, templates, quality assurance practices, and use of TeamMate+ audit management software. Stay current on emerging risks, evolving regulations, cybersecurity threats, AI developments, and leading audit practices. Champion the use of data analytics, automation, continuous auditing techniques, and AI-enabled tools to improve audit effectiveness and efficiency.
Perform other duties as assigned by the Chief Audit Executive.