Sr. IT Audit Consultant

Duke Energy Corporation•Charlotte, NC

3d•Hybrid

About The Position

The Senior IT Audit Consultant is a member of Duke Energy’s Corporate Audit Services Department, which provides internal audit services to support effective risk management, operational efficiency, and constructive change. Based in Charlotte, North Carolina, the position reports administratively to an IT Audit Manager and works in a matrix environment. Travel may be required up to approximately 15%, and the role is classified as hybrid, with three days per week in the office or onsite. The successful candidate must reside within 50 miles of the designated location. The consultant plans and executes risk-based audits and consulting engagements covering information technology, cybersecurity, emerging technologies, and technology-enabled business processes. Work includes risk assessments, audit scope and test plan development, interviews, data gathering and analysis, audit documentation and reporting, communicating risks and issues, and follow-up procedures. The role may include oversight of assigned audit staff and use of analytics, visualization, automation, and AI-enabled techniques to improve audit quality, efficiency, and coverage.

Requirements

Bachelor’s degree in Computer Science, Management Information Systems, Information Technology, Cybersecurity, Engineering, Accounting, Business Administration, Economics, Data Science, Artificial Intelligence, or a related discipline.
At least three years of relevant professional experience in IT auditing, cybersecurity, technology risk management, information security, public accounting, consulting, major systems implementation, or a related field.
Technical skills and advanced knowledge or experience across varied IT fields, including cybersecurity and information security, IT governance and controls, identity and access management, operating systems, databases, application development, systems development life cycle, Agile and modern architecture, cloud technologies, data governance, privacy, digital transformation, artificial intelligence, and emerging technologies.
Demonstrated ability to independently plan and execute risk-based audit, compliance, risk, or technology-related assignments.
Working knowledge of IT governance, cybersecurity, technology controls, and risk management concepts.
Ability to work lawfully in the United States without employment-based immigration sponsorship, now or in the future.
Must reside within a 50-mile radius of the position’s designated location.

Nice To Haves

Five or more years of relevant professional experience in IT auditing, cybersecurity, technology risk management, information security, public accounting, consulting, major systems implementation, or a related field.
An advanced degree, such as an MBA or a master’s degree in Information Systems, Cybersecurity, Data Analytics, Data Science, Artificial Intelligence, or a related field.
Holds or is working toward relevant certifications such as CISA, CISSP, CISM, CRISC, CIPP, CIA, PMP, PE, or a relevant cloud, artificial intelligence, data science, or analytics certification.
Experience in a large public accounting firm, consulting firm, Fortune 500 company, utility, energy company, or highly regulated organization.
Experience leading complex audit, risk, compliance, technology, or major systems implementation assignments.
Experience auditing or assessing cloud environments, cybersecurity programs, data governance, digital transformation initiatives, artificial intelligence, or emerging technologies.
Strong written and oral communication skills, including the ability to tailor messages to different audiences and management levels.
Resourcefulness and sound judgment when working through ambiguity, including on complex audit projects.
Ability to work independently, balance multiple projects, and deliver results within established milestones.
Ability to identify and assess risks and impacts and develop and manage a risk-informed audit scope and approach.
Ability to acknowledge customer needs and expectations and adjust tasks appropriately to add business value.
Project leadership experience, including guiding and coaching assigned audit staff.
Experience with data analytics, visualization, automation, or AI-enabled auditing.

Responsibilities

Plan and execute risk-based IT, cybersecurity, emerging technology, and technology-enabled audit and consulting engagements, with limited supervision and, where applicable, oversight of assigned audit staff.
Develop audit objectives, scope, testing strategies, and procedures that address identified risks.
Evaluate the design and operating effectiveness of governance, risk management, and control processes using professional judgment and skepticism.
Gather and analyze data to identify trends, assess risks, support audit conclusions, and develop practical recommendations.
Prepare clear, accurate, well-supported audit documentation, observations, reports, and other engagement deliverables.
Monitor audit progress against milestones, budgets, and quality expectations.
Track post-audit action plans and perform follow-up procedures to validate implementation and risk mitigation.
Communicate effectively in writing and orally, tailoring messages to different audiences and management levels.
Build and maintain relationships with audit customers, business leaders, subject matter experts, external auditors, and other assurance providers.
Participate in annual risk assessments, identify technology, cybersecurity, and emerging risks, and support development of the annual audit plan.
Maintain current knowledge of Duke Energy’s strategic objectives, technology, cybersecurity, data governance, privacy, emerging technologies, the energy industry, and leading practices.
Use data analytics, visualization, automation, and AI-enabled audit techniques to improve audit quality, efficiency, and coverage and contribute to improvements in audit methods and tools.