IT Audit Manager

Plante Moran

2d•$120,000 - $145,000•Hybrid

About The Position

This role involves managing and executing IT audits, including tests of design and operational effectiveness, in a collaborative team setting. The audits support Internal Controls over Financial Reporting for compliance with various regulatory requirements such as SOX, FDICIA, and JSOX, acting as either an external or internal auditor. The position also entails performing and/or managing Information Technology (IT) Audits covering areas like system development, incident response, and business continuity across diverse industries including Financial Services, Services Industry, Public Sector, Healthcare, and Manufacturing. A strong understanding of information security frameworks such as COBIT, CSI, NIST, and ISO, along with associated risk assessment approaches, is crucial. The role requires managing multiple client projects and teams throughout the full project lifecycle, from scoping and budgeting to resourcing, leading client discussions, ensuring quality of deliverables, and interacting with client stakeholders. Additionally, the IT Audit Manager will be responsible for training and guiding team members on IT Audit concepts through formal and on-the-job training, attending and presenting at professional conferences to support team growth, and contributing to internal firm initiatives like recruiting, improving client delivery efficiencies, and exploring new technologies. Practice development activities with prospective clients and other networking are also part of the role, as is assisting the firm in developing new tools and services related to emerging trends in IT audit and security.

Requirements

Bachelor’s Degree in Accounting, Information Systems or similar discipline required.
5-7 years' experience performing and supervising IT Audits, Technology Risk Assessments, or IT internal control risk evaluation and reporting.
Current certificate or commitment to obtain preferred certifications within one (1) year. Preferred certifications include CISA, CIA or CISSP.
Concise professional writing skills to summarize key take aways and project challenges/deficiencies to project stakeholders.
Flexible schedule required to be responsive to client requests within total and billable hours goals.
Proactive approach to problem-solving, and the ability to manage multiple tasks efficiently.
Proven experience in a professional services or client-facing role, along with defining scope of services and projects for new client and expansion of clients.
Proficiency with audit tools and Microsoft office suite.
Superior attention to detail and conscientious quality of work product.
Professional demeanor with superior verbal and written communication skills.
Ability to travel overnight for client work and firm events 25-35%.
This is an exempt position, so you may have to work hours that exceed the standard 40-hour work week.

Nice To Haves

Knowledge of information security frameworks including COBIT, CSI, NIST, ISO, etc. and associated risk assessment approaches.

Responsibilities

Managing and executing IT Audits (test of design, test of operative effectiveness) in a collaborative team setting in support of Internal Controls over Financial Reporting for compliance with various regulatory requirements (e.g., SOX, FDICIA, JSOX) as an external or internal auditor.
Performing and/or managing Information Technology (IT) Audits (e.g., system development, incident response, business continuity, etc.) and Security Assessments in various industries including Financial Services, Services Industry, Public Sector, Healthcare and Healthcare and Manufacturing.
Managing multiple client projects, and teams with responsibilities over the full project lifecycle including scoping, budgeting, resourcing, leading client discussions, providing quality assurance of engagement deliverables, and interactions with client stakeholders.
Training and guiding team members on IT Audit concepts through formal training and on-job training.
Attending and presenting at professional conference events to support ongoing team growth.
Contributing to internal firm initiatives including recruiting, seeking efficiencies in client delivery, and exploring new technologies to support internal and external projects.
Engage in practice development activities with prospective clients and other networking activities.
Assist the firm in developing new tools and services related to emerging trends in IT audit and security.