Manager, IT Internal Audit

FactSet•Boston, MA

1d•$128,000 - $160,000•Hybrid

About The Position

The Manager, IT Internal Audit is a key contributor within FactSet’s Internal Audit function and reports to the Associate Director, IT Internal Audit. The role plans, coordinates, and executes risk-based IT audits covering IT General Controls (ITGCs), application controls, cybersecurity, infrastructure, and other technology-related risks. It evaluates control design and operating effectiveness, documents findings, and ensures timely delivery of audit deliverables. The position also supports business process audits by providing technology expertise on automated controls, system dependencies, and technology risks. It partners with IT, Finance, external auditors, and business management on SOX ITGC compliance, remediation monitoring, and improvements to audit quality and operational efficiency. The position is based in New York City, Norwalk, Connecticut, or Boston, Massachusetts, with a hybrid work arrangement. The budgeted salary range for New York City and Connecticut is $128,000–$160,000.

Requirements

Bachelor’s degree in Information Systems, Information Technology, Accounting, Computer Science, Cybersecurity, or a related field.
At least 5 years of progressive experience in IT Audit, Internal Audit, External Audit, SOX compliance, or a related assurance function.
Experience supporting or managing audit teams and executing IT audit portfolios; experience in a publicly traded organization is preferred.
Experience drafting audit scope memos, findings, and formal audit reports with clear, concise, and well-supported conclusions for technical and non-technical audiences.
Knowledge of ITGCs, application controls, automated controls, cybersecurity, and infrastructure risk concepts.
Hands-on experience assessing technical infrastructure, including network architecture and security, database platforms, cloud environments (AWS, Azure, or GCP), and emerging technologies such as AI/ML systems.
Familiarity with financial reporting processes and the intersection of technology and internal controls over financial reporting.
Strong project management, analytical, problem-solving, and stakeholder management skills.
Ability to communicate effectively with senior leaders, IT management, control owners, and external auditors on technical and non-technical topics.
Must be legally authorized to work in the United States without current or future employer sponsorship.

Nice To Haves

CIA, CISA, CISSP, or another relevant professional certification.
Knowledge of ERP platforms such as Workday, Oracle, or SAP.
Experience with GRC platforms and audit management tools.
Experience using data analytics, automation, and continuous monitoring to improve audit effectiveness and efficiency.
Demonstrated ability to contribute to process improvement and control optimization initiatives within an audit or assurance function.

Responsibilities

Plan, coordinate, and execute IT audits, including scoping, fieldwork, review, and reporting.
Assess ITGCs, application controls, automated controls, cybersecurity, and infrastructure risks using established methodologies.
Perform substantive technical testing, including access reviews, configuration analysis, cloud architecture reviews, data analytics, and artificial intelligence-related testing, when needed to investigate control gaps or ambiguity.
Review workpapers, testing conclusions, and supporting documentation for accuracy, consistency, and quality.
Partner with Internal Audit leadership and stakeholders to develop annual audit plans aligned with organizational risk priorities.
Identify emerging technology risks and recommend changes to audit coverage and procedures.
Support business process audits by identifying and evaluating technology components, automated controls, and system dependencies within business operations.
Provide technology risk expertise in business audit engagements.
Lead, mentor, and develop audit team members responsible for IT testing.
Manage workload balancing, performance management, and resource planning across the IT audit portfolio.
Build and maintain relationships with IT management, control owners, business leaders, Finance, and external auditors.
Communicate audit findings and control deficiencies to technical and non-technical audiences.
Support external auditor interactions by providing documentation and assisting with SOX IT reliance activities.
Oversee the identification, documentation, and evaluation of IT control deficiencies and audit findings.
Monitor remediation activities, validate corrective actions, and report on finding trends and the health of the IT control environment.
Support SOX ITGC testing, coach control owners, and maintain high-quality workpaper documentation to facilitate external auditor reliance.
Contribute to consistent audit methodologies and compliance standards across the organization.