Senior Manager, IT Audit

Navy Federal Credit Union•Vienna, VA

1d•$129,500 - $189,400•Onsite

About The Position

Navy Federal's Internal Audit team is undergoing a transformation to become a best-in-class Audit function, aiming to be a preferred advisor to the business through high-quality, risk-focused audit and advisory work. The team is focused on efficient processes, technology utilization, data analytics integration, and investing in its people. This role provides leadership and oversight for Internal Audit functions and teams responsible for planning and executing Information Technology (IT) and Information Security audits across the Credit Union using a risk-based approach. The position manages a portfolio of concurrent audit, advisory, and issue-validation activities, aligning priorities, resources, and schedules with business needs, the Annual Work Program, and emerging risks. The role also serves as an advisor on audit risk management, operational efficiency, policy development, governance, and remediation activities.

Requirements

Bachelor’s degree in IT, Cybersecurity, technology management or related field, or the equivalent combination of experience, education, and training.
Seven to ten years of experience in IT audit, with advanced knowledge of internal control concepts and practices and risk-based auditing techniques.
Significant experience in IT risks and controls concepts and practices, including governance and security frameworks such as FFIEC, COBIT, COSO, NIST and ISO.
Proven ability to manage multiple priorities and complex projects within a dynamic environment.
Experience supervising and developing professional staff, including coaching and performance management.
Skilled in planning and coordinating audits, facilitating strategy and status meetings, and ensuring timely execution.
Strong interpersonal and communication skills, with experience engaging stakeholders across multiple levels.
Ability to present findings and recommendations clearly and concisely to management and committees.
Demonstrated success in collaborating across organizational boundaries and building partnerships.
Solid critical and analytical thinking skills, including the ability to synthesize information and identify patterns or risks.
Proficiency in influencing and negotiating to achieve agreeable and positive outcomes.
Strong organizational, planning, and time management skills.
Advanced proficiency in Microsoft Office tools (Word, Excel, PowerPoint, etc.).
Commitment to confidentiality and integrity in all aspects of work.

Nice To Haves

Master’s degree in Accounting, Finance, Business, Information Technology, Cybersecurity, or a related field.
Professional certification such as CIA, CISA, CPA, CISSP, or other relevant audit, risk, or cybersecurity certification.
Experience leading a portfolio of IT audit, advisory, and issue-validation activities within a financial services or credit union environment.
Experience with annual audit planning, auditable-entity risk assessment, project and resource management, issue-lifecycle oversight, and coordination across audit and assurance functions.
Experience applying data analytics, audit management platforms, and technology-enabled audit techniques, and working with external specialists or consultants.

Responsibilities

Manages and oversees comprehensive, risk-based IT and Information Security audit teams, such as IT general controls, cybersecurity and privacy, data governance, infrastructure, ITIL processes, and third-party risk management, ensuring adherence to Navy Federal and industry and regulatory standards while aligning audit priorities with business objectives and emerging risks.
Directs multiple concurrent audit engagements, establishing schedules and resource plans and providing guidance on scoping, control testing, documentation, issue validation, and execution quality.
Manages assigned IT audit areas and actively participates in enterprise and bottom-up risk assessments, auditable-entity planning, and multi-year coverage decisions to inform audit priorities and the Annual Work Program.
Reviews and approves key audit deliverables, including scopes, risk and control matrices, testing results, issue documentation, and audit reports, while ensuring accuracy, clarity, and timeliness.
Coordinates IT audit teams in evaluating the design and effectiveness of internal controls, identifying issues, and developing risk-based recommendations for improvement.
Maintains awareness of applicable laws, regulations, industry standards, and emerging risks to ensure audit coverage remains current and relevant.
Builds strong relationships with business leaders and serves as a liaison to committees and senior management; collaborates across audit teams and with stakeholders, assurance partners, and specialists to coordinate coverage and drive effective remediation of audit findings.
Manages and develops IT audit teams through hiring, coaching, performance management, resource allocation, and workload monitoring, and promotes the adoption of data analytics and innovative audit approaches (e.g., outcomes-based testing, AI, etc.).
May manage IT advisory engagements, and/or internal special projects or initiatives as needed.
May perform other duties as assigned.