Let's begin! IT Audit Manager

Moody's•Charlotte, NY

4d•Remote

About The Position

At Moody's, we unite the brightest minds to turn today’s risks into tomorrow’s opportunities. We do this by striving to create an inclusive environment where everyone feels welcome to be who they are—with the freedom to exchange ideas, think innovatively, and listen to each other and customers in meaningful ways. Moody’s is transforming how the world sees risk. As a global leader in ratings and integrated risk assessment, we’re advancing AI to move from insight to action—enabling intelligence that not only understands complexity but responds to it. We decode risk to unlock opportunity, helping our clients navigate uncertainty with clarity, speed, and confidence. If you are excited about this opportunity but do not meet every single requirement, please apply! You still may be a great fit for this role or other open roles. We are seeking candidates who model our values: invest in every relationship, lead with curiosity, champion diverse perspectives, turn inputs into actions, and uphold trust through integrity.

Requirements

Minimum 5 years of experience in a Big 4 accounting firm and/or a global organization within an audit, risk, or controls role
Strong technical knowledge and understanding of risk and controls across a variety of technologies and IT infrastructure platforms, including cloud environments (AWS, Azure, GCP), identity and access management, infrastructure and endpoint controls, and cybersecurity domains
Deep knowledge and experience in internal control frameworks and risk standards (COSO, COBIT, ISO, NIST), Sarbanes-Oxley requirements, and financial systems and related technology
Experience performing assurance work over software development, SaaS solutions, secure coding, and cloud and data processes; working knowledge through compliance, risk management, or consulting roles within the fintech or technology sector is also valued
Demonstrated ability to apply data analytics tools such as Excel, Power BI, and Tableau to enhance audit testing, identify trends, and build continuous monitoring capabilities
Innovative, results-oriented, and able to demonstrate strong communication, interpersonal, persuasion, leadership, team management, project management, and critical thinking skills
Proficiency in the Microsoft Office suite; fluency in written and spoken English required; ability to work both independently and as a member of a team in a fast-paced environment while managing multiple priorities
Demonstrated proficiency in artificial intelligence concepts, with hands-on experience using AI tools to streamline workflows and enhance operational efficiency.
Proven ability to implement AI-powered solutions to solve business challenges.
Demonstrates a growing awareness of AI risk management and a commitment to responsible and ethical AI use.
CISA, CISSP, or CRISC certification (or equivalent professional qualification) required

Responsibilities

Lead and execute risk-based IT and integrated audits across the organization, managing the full audit lifecycle while partnering with senior stakeholders and coaching team members.
Plan and execute risk-based IT and integrated audits, performing hands-on testing on complex and high-risk areas while directing the overall engagement
Develop and maintain a deep understanding of the technology environment, key business processes, and associated IT risks and controls across business segments, applying this knowledge during scoping, walkthroughs, and testing
Perform and oversee testing of design and operating effectiveness across IT and technology risk domains, including cloud environments, identity and access management, infrastructure controls, vulnerability and patch management, IT change management, data governance, and AI/ML and generative AI governance
Manage the end-to-end audit lifecycle — including scoping, timelines, information gathering, documentation, and reporting — ensuring all work is performed in accordance with departmental and Institute of Internal Auditors standards
Translate technical and control-level findings into clear, business-relevant risk insights; draft observations, impact statements, and practical recommendations, and coach team members to do the same
Partner and communicate effectively with Technology, Data, and Product teams while maintaining independence throughout the audit lifecycle and driving meaningful, risk-based remediation
Validate remediation of audit findings and track timely issue closure, including evaluating action plans, independently reviewing and retesting evidence, and confirming sustainable control improvements
Coach and develop junior team members through the audit lifecycle, including communicating roles and expectations, reviewing workpapers, providing feedback, and reinforcing accountability for deliverables, hours, and cycle time