IT Audit Manager

Woodforest National Bank•The Woodlands, TX

About The Position

The IT Audit Manager serves as a technical subject matter expert within Internal Audit, developing, planning, and executing medium- to complex-risk-based audits focused primarily on the organization’s technology environment. Areas of focus include infrastructure, network architecture, cloud computing, information security, cybersecurity, data governance, IT operations, and emerging technology risks. The role partners with technology leadership while maintaining independence, providing strategic insight into control effectiveness, regulatory expectations, emerging threats, and industry best practices. The position also supports the advancement of the Internal Audit function through technical audit methodologies, risk assessments, data analytics capabilities, and continuous auditing solutions. The manager completes audits with limited guidance, assists with workpaper reviews and annual audit planning, represents Internal Audit on technology projects, and provides technical guidance and data to auditors. Supervisory responsibility varies depending on the audit. Less than 5% travel is expected.

Requirements

At least 6 years of experience in IT auditing or an information technology role, with demonstrated exposure to internal controls and/or risk assessment practices.
At least 2 years of experience leading complex IT projects or IT audits.
Ability to learn to manage medium- to complex-level IT process or application audits from beginning to end with limited guidance.
Strong working knowledge of auditing standards and internal control frameworks.
Excellent written and verbal communication, interviewing, and presentation skills.
Inquisitive critical-thinking ability, business risk awareness, professional skepticism, and sound judgment.
Ability to interact effectively with and respond to common inquiries from executive management, regulatory agencies, and outside consultants.
Extensive knowledge of IT practices, vulnerability assessment, change control, business continuity, data privacy, and risk assessment practices.
Exposure to IT areas such as operating systems, databases, platforms, network hardware and software, security tools, cloud services, data mining tools, and common software and applications.
Ability to keep abreast of emerging technology and cybersecurity trends and learn new skills quickly.
Strong project management and organization skills, with attention to detail.
Ability to research and assimilate information, apply problem-solving and analytical skills, and influence issue resolution.
Ability to manage multiple responsibilities and projects in a fast-paced environment with competing priorities and deadlines.
Strong leadership and interpersonal skills, including the ability to collaborate across employee levels, build consensus across diverse teams, and achieve results through others.

Nice To Haves

Banking or financial services industry experience.
Ability to read or write queries and working knowledge of programming tools.
Strong technical background in cybersecurity, information security, cloud engineering, or infrastructure.
Bachelor’s degree in Information Systems, Computer Science, or a related field.
Industry-recognized certification such as Certified Information Systems Auditor (CISA) or Certified Information Systems Security Professional (CISSP).

Responsibilities

Complete medium- to complex-level IT process or application audits from beginning to end with limited guidance, including walkthroughs, risk assessment and scope development, audit testing, documentation, discussion of results with management, report drafting, and tracking issues to completion.
Assist with reviewing workpapers and driving completion of the annual IT audit plan.
Represent Internal Audit on IT projects and initiatives, including participating in risk assessments.
Serve as a department resource for technical questions and guidance.
Extract and provide data to auditors for analysis.
Participate in the annual risk assessment and development of the annual audit schedule.