IT Audit Risk and Compliance Manager

$130,000 - $135,000/Yr

Cdk - Austin, TX

Full-time - Mid Level

Austin, TX

Insurance Carriers and Related Activities

About the position

The IT Audit Risk and Compliance Manager at CDK plays a crucial role in the Internal Audit organization, acting as a liaison for IT and Product & Technology security and compliance. This position is responsible for providing independent control assurance and advisory services, ensuring effective IT governance, risk management, and internal control. The ideal candidate will leverage their extensive experience in IT auditing to manage compliance testing, oversee risk assessments, and execute audits, all while fostering strong relationships with stakeholders and external auditors.

Responsibilities

• Manage IT SOX compliance testing and coordination with control owners and external auditors.
• Provide oversight and coordination over SOC 1 & 2 risk assessment and control activities with control owners, Product and IT management, external auditors, and customers.
• Develop, execute, and conclude information technology, information security, technology product, and related audits.
• Prepare formal written reports expressing conclusions, review results with management, and perform ongoing reporting of remediation efforts.
• Recommend improvements to systems, procedures, and processes to minimize risks, improve efficiency, or generate cost savings.
• Perform validation of exceptions including quantifying risks, investigating root causes, and working with owners to establish action plans.
• Maintain an adaptive, yet agile approach based on the in-scope entity's technical architecture and use of specific technology platforms or configurations.
• Apply data analytics across the IT environment for advanced audit planning and continuous audit concepts.

Requirements

• Bachelor's degree in management information systems, Computer Science, Mathematics, Business, Finance, or Accounting.
• 8+ years of professional experience in IT Governance, IT Risk, IT Audit, IT Operations, or related fields, preferably with Fortune 1000 companies or Big 4 consulting experience within advisory or assurance.
• CISM, CISA, CISSP, CRISC designation or other relevant certification is required.
• Solid experience in the Identity Access Management space and ERP Systems (Oracle).
• Experience supporting audits and assessments across cloud technology (AWS, Azure) and Software-as-a-Service (Workday, COUPA, etc.).
• Understanding of regulatory and external requirements as they relate to IT, privacy, and cybersecurity for regulations such as HIPAA, GDPR, and SOX.
• Experience using industry standards/frameworks, such as NIST 800-53, NIST 800-171, NIST Privacy Framework, CSA CCM, ISO 27001, ITIL v3, COBIT, and FAIR is desirable.

Nice-to-haves

• Knowledge of IT Operational Functions including IAM, Asset Management, Cybersecurity, Data Privacy.
• Track record of working alongside business leaders, positioning internal audit as a strategic partner, identifying and helping mitigate risk.
• Modern Audit/Data-Driven Approach - Track record of leveraging technology and using data to drive insights and actions.
• Strong quantitative and qualitative analysis skills; ability to take large volumes of complex information and present it in a clear and concise manner.
• Understanding of the quality regulations and auditing techniques required for the SAAS industry.

Benefits

• Medical, dental, and vision benefits
• Paid Time Off (PTO)
• 401K Matching Program
• Tuition Reimbursement