Senior Manager, IT Internal Audit

SharkNinja•Needham, MA

1d•$126,800 - $186,000•Hybrid

About The Position

SharkNinja's Internal Audit department is dedicated to protecting the trust the company earns by providing independent, objective assurance and insights to help the company create, protect, and sustain value as it grows. The department facilitates the enterprise risk management program, executes risk-based business reviews (advisory and assurance), assesses internal control over financial reporting (ICFR / SOX), and delivers rapid insights. The Senior Manager, IT Internal Audit will lead the technology dimension of all Internal Audit activities, including ITGC assessment, risk sensing, and the governance and auditing of AI. This is a builder role where the individual will help shape the future of the department's technology audit capabilities.

Requirements

8+ years of progressive IT audit, IT risk, or technology risk advisory experience.
Big 4 / national firm foundation plus in-house experience strongly preferred.
Strong command of risk-based auditing: technology risk assessment, planning driven by risk, and reporting that connects technical findings to business impact.
Deep ITGC and SOX 404 expertise across ERP environments.
Strong command of access management and segregation of duties concepts, including privileged and service account risk.
Experience testing automated controls, interfaces, key reports, and IPE.
Data analytics capability, including SQL, Python, Alteryx, or similar, with a track record of building monitoring or full-population testing.
CISA required or strongly preferred.
Working knowledge of cybersecurity frameworks (NIST, ISO 27001) and data privacy fundamentals.
Versatility across the mandate, anchored in technology but comfortable contributing to ERM facilitation, business reviews, and compliance work.
AI fluency, or a genuine drive to build it.
Executive presence with translation skills: ability to make technical risk land with non-technical leaders, plainly and without drama.
A builder's mindset: ability to bring structure to ambiguity, own outcomes, and challenge the status quo.

Nice To Haves

Oracle Cloud/EBS experience strongly preferred.
Coupa or other procure-to-pay platforms experience a plus.
Experience coordinating across the three lines and positioning work for external auditor reliance.
Experience with GRC/access governance tools (e.g., Oracle Risk Management Cloud or similar).
CISSP, CRISC, CIA, or cloud certifications a plus.
Exposure to IoT/connected product environments a plus.
Bonus points if you have a point of view on how AI systems themselves should be governed and audited.

Responsibilities

Facilitate the ERM program, including building "smoke detectors" for risk.
Engineer the technical side of risk sensing, including continuous monitoring, anomaly detection, and analytics to identify emerging risk signals.
Own the technology, cybersecurity, data privacy, and third-party risk assessment, including for connected and IoT products, and translate technical exposure into business-relevant insight.
Integrate risk assessment findings into the risk-based audit plan.
Lead technology-focused business reviews (advisory and assurance), including cyber, data privacy, system implementations, and third-party technology.
Embed data analytics in reviews for full-population testing.
Partner with IT and InfoSec as allies, coordinating efforts to avoid duplication and ensure IA adds unique value.
Help define the governance and assurance approach for AI-enabled processes and tools.
Lead pre- and post-implementation reviews for major system deployments and enhancements.
Lead the ITGC dimension of ICFR (SOX) assessments, including scoping, testing, and deficiency management.
Support ITGC remediation, focusing on high-priority gaps like privileged access and segregation of duties.
Assess automated controls, key reports, and IPE assurance.
Coordinate with other lines of defense and external audit to maximize reliance and eliminate duplication.
Serve as a technical trusted resource for rapid, risk-based answers on technology, security, and AI initiatives.
Work alongside agentic AI teammates, owning judgment and sign-off, and contributing to their development.
Develop team members and co-source resources, raising the technical bar for IT audit capability.
Communicate technical risk effectively to non-technical leaders.