IT Audit Director – AI, Cyber & Cloud - 1823

PlacingIT•Reston, VA

13d•Hybrid

About The Position

We are seeking an experienced IT Audit Director specializing in AI, cybersecurity, cloud infrastructure, and emerging technology risk to join a highly technical internal audit team within a large, complex enterprise environment. This is a hands-on leadership role for someone who can operate at both the Director and technical practitioner level. You will personally lead and execute complex technology audits while also coaching team members, developing audit strategies, communicating findings to senior management, and helping shape the organization's approach to emerging technology risks. The ideal candidate combines strong internal IT audit experience with deep technical knowledge of cybersecurity, artificial intelligence, cloud infrastructure, systems architecture, or information security. This is not a traditional ITGC/SOX-focused audit position. We are looking for someone who can engage directly with engineers, security professionals, architects, AI teams, and technology leaders and comfortably discuss highly technical environments and risks.

Requirements

8+ years of experience in IT Audit, IT Risk Management, Information Security, or closely related technology risk disciplines.
Significant internal audit experience within a large, complex organization.
Deep technical expertise in at least one or more of the following: Cybersecurity, Artificial intelligence, Cloud infrastructure, AWS or comparable cloud platforms, Information security, Systems/infrastructure architecture.
Demonstrated experience leading complex, technically focused IT audits.
Ability to personally perform technical audit work while simultaneously leading engagements and teams.
Strong project management skills with experience managing multiple stakeholders and complex audit engagements.
Formal people management experience, including coaching, mentoring, and providing performance feedback.
Excellent written and verbal communication skills.
Ability to communicate credibly with highly technical engineers, architects, cybersecurity professionals, and technology executives.
Candidates should bring hands-on experience with AI from both an audit and technology-risk perspective, including: Experience auditing AI solutions, platforms, models, or related technology risks.
Understanding of AI governance, security, controls, and emerging risk considerations.
Knowledge of agentic AI architectures and associated risks.
Experience using AI solutions to improve the effectiveness and efficiency of audit execution.
Ability to evaluate rapidly evolving AI technologies and translate technical developments into meaningful audit and enterprise risk considerations.
Strong data analytics capabilities are important for this role, including: Experience identifying, designing, and implementing meaningful data visualizations.
Experience with visualization tools such as Power BI, Tableau, Plotly, or similar platforms.
Coding and data analysis experience using Python and related libraries or technologies such as: NumPy, SciPy, PySpark.
Ability to use data analytics to identify risk, test controls, analyze large data sets, and improve audit execution.

Responsibilities

Own and lead complex technology audits across areas including: Artificial intelligence and emerging AI technologies, Cybersecurity and information security, Cloud infrastructure and architecture, Technology resiliency, Systems architecture and infrastructure, Emerging technology and enterprise technology risk.
Plan, lead, and execute complex internal IT audits from initial risk assessment through final reporting.
Perform hands-on technical testing and analysis rather than solely overseeing audit teams.
Conduct technical walkthroughs with engineering, cybersecurity, infrastructure, cloud, and AI teams.
Assess technology architecture, controls, vulnerabilities, and emerging risks.
Develop audit objectives, testing strategies, work programs, and risk-based audit approaches.
Prepare clear, concise audit reports and communicate findings and recommendations to management.
Present complex technical risks in a way that both technical and non-technical stakeholders can understand.
Contribute to annual technology audit planning and risk assessments.
Develop points of view on emerging AI, cyber, cloud, and technology risks.
Coach, mentor, and provide meaningful feedback to audit team members.
Use data analytics, automation, and AI to improve audit quality, effectiveness, and efficiency.
Partner with technology executives, technical SMEs, auditors, risk teams, and business stakeholders.