Manager - IT Audit Services

Duke Energy Corporation•Charlotte, NC

3d•Hybrid

About The Position

Duke Energy's Corporate Audit Services Department delivers world-class internal audit services that enable Duke Energy to achieve superior performance. You will work in high-performing teams that add value, drive effective risk management, and facilitate constructive change while also focusing on employee and professional development. The Manager, IT Audit Services is a member of the Corporate Audit Services (CAS) leadership team and is responsible for leading risk-based IT, cybersecurity, and emerging technology audits across the enterprise. While primarily responsible for leading IT and cybersecurity audits, the manager may also oversee financial, operational, compliance, and technology-enabled audits based on enterprise risk priorities. This position reports administratively to a Director, Corporate and IT Audit and is located in Charlotte, NC. Travel will be required, up to approximately 15% annually.

Requirements

Demonstrated experience leading complex audit, risk, compliance, or technology-related initiatives.
Strong understanding of IT governance, cybersecurity, technology controls, and risk management frameworks.
Bachelor's degree in Computer Science, Management Information Systems, Information Technology, Cybersecurity, Engineering, Accounting, Business Administration, Economics, Data Science, Artificial Intelligence, or a related discipline.
Eight (8) or more years of relevant professional experience in IT auditing, cybersecurity, technology risk management, information security, public accounting, consulting, or a related field.

Nice To Haves

Two (2) or more years of IT audit management or supervisory experience.
Experience within a large public accounting, consulting, utility, energy, or highly regulated organization.
Experience auditing cloud technologies, cybersecurity programs, data governance, digital transformation initiatives, and emerging technologies.
Experience auditing, assessing, or governing artificial intelligence, machine learning, generative AI, advanced analytics, or algorithmic decision-making processes.
Understanding of AI governance frameworks, model risk management principles, responsible AI practices, and applicable regulatory requirements.
Experience utilizing data analytics, automation, visualization, and AI tools to enhance audit coverage and efficiency.
Familiarity with technologies such as Generative AI, large language models (LLMs), machine learning, predictive analytics, and AI-enabled business applications.
Advanced degree such as an MBA, Master's in Information Systems, Cybersecurity, Data Analytics, Data Science, Artificial Intelligence, or related field.
One or more professional certifications, including: CISA (Certified Information Systems Auditor), CISSP (Certified Information Systems Security Professional), CISM (Certified Information Security Manager), CRISC (Certified in Risk and Information Systems Control), CIPP (Certified Information Privacy Professional), PMP (Project Management Professional), CIA (Certified Internal Auditor).
Relevant AI, Data Science, Cloud, or Analytics certifications
Demonstrated success leading teams through organizational and technological change.
Demonstrated verbal, written, and executive communication skills.
Ability to influence and collaborate effectively across all levels of the organization.
Strong business acumen, critical thinking, and strategic decision-making skills.
Proven ability to build partnerships, resolve conflict, and drive results in a complex environment.

Responsibilities

Support the Corporate Audit Services leadership team in building and sustaining a high-performing team.
Advance the department’s talent strategy through recruiting, developing, and mentoring employees.
Execute the strategic and operational initiatives of a high-performing internal audit function
Develop risk-based IT and cybersecurity audit plans that support both near-term and long-term audit coverage across the enterprise.
Adjust audit priorities and resource plans in response to changing business strategies, regulations, threat conditions, technologies, and risk exposures.
Plan and manage internal audit efforts including establishing and executing appropriate audit approaches and methods.
Ensure high quality audit results and well-crafted audit report deliverables while remaining mindful of executing within prescribed time budgets.
Ensure audit work complies with the Global Internal Audit Standards, departmental methodology, and applicable quality expectations.
Ensure complete communication and seamless coordination within Corporate Audit Services to maximize effectiveness, efficiency and consistency across the function.
Foster collaboration within the department, management and project teams.
Build and maintain effective relationships within business segment executives and other personnel.
Coordinate technology-related assurance activities with other assurance providers, external auditors, and regulatory bodies, as appropriate.
Maintain an understanding of the Company’s strategic objectives, business priorities, and evolving industry risks to ensure audit activities remain aligned with enterprise needs.
Maintain awareness of emerging cybersecurity threats, technology trends, and digital transformation initiatives affecting the Company.
Champion the use of data analytics, visualization, automation, and AI-enabled audit techniques to improve audit quality, efficiency, and coverage.
Identify opportunities to use data and technology throughout risk assessment, planning, testing, reporting, and continuous monitoring.
Drive improvements in audit methods, tools, quality, productivity, and stakeholder value.