Sr. IT Audit Consultant

Duke Energy•Charlotte, NC

1d•Hybrid

About The Position

The Senior IT Audit Consultant is a member of Duke Energy's Corporate Audit Services Department, which delivers internal audit services to support performance, risk management, operational efficiency, and constructive change. Based in Charlotte, North Carolina, this role plans and executes risk-based audits and consulting engagements involving information technology, cybersecurity, emerging technologies, and technology-enabled business processes. The position reports administratively to an IT Audit Manager and works in a matrix environment. Travel may be required, approximately 5–15%. The role is hybrid, with three days per week in the office or onsite, and the successful candidate must reside within 50 miles of the designated location. The consultant works with audit teams on risk assessments, audit scoping and test planning, interviews, data gathering and analysis, audit documentation and reporting, communications about risks and issues, and follow-up procedures. The role may also oversee the day-to-day work of assigned audit staff. It requires technical knowledge across varied IT fields, including cybersecurity and information security, IT governance and controls, identity and access management, operating systems, databases, application development, systems development life cycle, Agile and modern architecture, cloud technologies, data governance, privacy, digital transformation, artificial intelligence, and emerging technologies. The consultant is expected to use data analytics, visualization, automation, and AI-enabled audit techniques to improve audit quality, efficiency, and coverage. Duke Energy describes opportunities for growth and development, recognition, competitive pay and benefits, and work-life balance. Relocation assistance is not provided. The position does not offer visa sponsorship, and candidates must be able to work lawfully in the United States without employment-based immigration sponsorship now or in the future.

Requirements

Bachelor's degree in Computer Science, Management Information Systems, Information Technology, Cybersecurity, Engineering, Accounting, Business Administration, Economics, Data Science, Artificial Intelligence, or a related discipline.
At least 3 years of relevant professional experience in IT auditing, cybersecurity, technology risk management, information security, public accounting, consulting, major systems implementation, or a related field.
Technical skills and advanced knowledge or experience across varied information technology fields, including cybersecurity and information security, IT governance and controls, identity and access management, operating systems, databases, application development, systems development life cycle, Agile and modern architecture, cloud technologies, data governance, privacy, digital transformation, artificial intelligence, and emerging technologies.
Demonstrated ability to independently plan and execute risk-based audit, compliance, risk, or technology-related assignments.
Working knowledge of IT governance, cybersecurity, technology controls, and risk management concepts.
Ability to work lawfully in the United States without employment-based immigration sponsorship, now or in the future.
Ability to reside within a 50-mile radius of the designated location.

Nice To Haves

At least 5 years of relevant professional experience in IT auditing, cybersecurity, technology risk management, information security, public accounting, consulting, major systems implementation, or a related field.
An advanced degree, such as an MBA or a master's degree in Information Systems, Cybersecurity, Data Analytics, Data Science, Artificial Intelligence, or a related field.
Holds or is working toward one or more relevant certifications, such as CISA, CISSP, CISM, CRISC, CIPP, CIA, PMP, PE, or a relevant cloud, artificial intelligence, data science, or analytics certification.
Experience within a large public accounting firm, consulting firm, Fortune 500 company, utility, energy company, or highly regulated organization.
Experience leading complex audit, risk, compliance, technology, or major systems implementation assignments.
Experience auditing or assessing cloud environments, cybersecurity programs, data governance, digital transformation initiatives, artificial intelligence, or emerging technologies.
Strong written and oral communication skills, including the ability to tailor messages to varied audiences and management levels.
Resourcefulness and sound judgment when managing ambiguity, including on complex audit projects.
Ability to work independently, balance multiple projects, and deliver results within established milestones.
Ability to identify and assess risks and impacts and develop and manage a risk-informed audit scope and approach.
Ability to recognize customer needs and expectations and adjust tasks to add business value.
Project leadership experience, including the ability to guide and coach assigned audit staff.
Experience with data analytics, visualization, automation, or AI-enabled auditing.

Responsibilities

Plan and execute risk-based IT, cybersecurity, emerging technology, and technology-enabled audit and consulting engagements with limited supervision; oversee assigned audit staff's day-to-day activities where applicable.
Develop audit objectives, scope, testing strategies, and procedures that address identified risks.
Evaluate the design and operating effectiveness of governance, risk management, and control processes using professional judgment and skepticism.
Gather and analyze data to identify trends, assess risks, support audit conclusions, and develop practical recommendations.
Prepare clear, accurate, and well-supported audit documentation, observations, reports, and other engagement deliverables.
Monitor audit progress against milestones, budgets, and quality expectations and complete assigned work promptly.
Monitor post-audit action plans and perform follow-up procedures to validate implementation and risk mitigation.
Communicate effectively in writing and orally, tailoring messages to different audiences and management levels.
Build and maintain relationships with audit customers, business leaders, subject matter experts, external auditors, and other assurance providers.
Participate in annual risk assessments, identify key technology, cybersecurity, and emerging risks, and support development of the annual audit plan.
Maintain and apply current knowledge of Duke Energy's strategic objectives, IT, cybersecurity, data governance, privacy, emerging technologies, the energy industry, and leading practices.
Use data analytics, visualization, automation, and AI-enabled audit techniques to improve audit quality, efficiency, and coverage, and contribute to improvements in audit methods and tools.