Technology Audit Leader

Booz Allen Hamilton•McLean, VA

1d•Remote

About The Position

As a Technology Audit Leader, you will help shape and advance Booz Allen’s internal technology audit capability, bringing a modern, forward-looking approach to building and executing a risk-based audit strategy across cybersecurity, cloud environments, data platforms, systems architecture, software development, and operational resilience. You will mentor teammates by providing day-to-day technical input that strengthens their understanding of IT controls, emerging technologies, and contemporary audit methodologies that leverage analytics, automation, and AI to enhance risk assessments. In this role, you will coordinate and oversee risk-based audit and control monitoring activities across complex technical environments to identify material risks instead of focusing on low-value compliance issues. You’ll analyze system configurations, process flows, security architectures, and automated controls, reaching well-supported conclusions with the ability to explain complex technical issues to executives. You will partner with technology leaders, cybersecurity teams, engineering groups, and first-line operators to build trusted relationships and evaluate control effectiveness, identify gaps, recommend improvements, and guide the development of remediation and enhanced control practices. You will also help build advanced audit capabilities that employ data analytics, automation, and AI to improve audit scoping, sampling, testing depth, and reporting clarity. By staying current on emerging threats, evolving technologies, and industry developments, you will ensure Booz Allen’s audit approach remains innovative, informed, and strategically aligned.

Requirements

10+ years of experience in IT audit, cybersecurity, technology risk, or technology control roles
Experience assessing technology environments such as cloud platforms, identity and access management, application security, networks, systems architecture, vulnerability management, or incident response
Experience leveraging analytics, automation, or AI to enhance audit testing and trend analysis
Experience performing risk-based assessments and identifying control gaps or areas for improvement
Knowledge of technology regulations, frameworks, and standards such as NIST, CIS, SOC, or SOX technology controls
Ability to work independently and communicate effectively with technical and non-technical stakeholders
Ability to obtain a Secret clearance
Bachelor’s degree

Nice To Haves

Experience with comparable IT audit functions
Experience reviewing internal SOX technology controls or evaluating technology-enabled financial systems
Ability to perform regulatory, policy, quantitative, and organizational analyses in support of technology risk and IT governance
Certified Internal Auditor (CIA) or Certified Information Systems Auditor (CISA) Certification
CISSP, CISA, CISM, CRISC, CCSP Certification

Responsibilities

Help shape and advance Booz Allen’s internal technology audit capability with a modern, forward-looking approach.
Build and execute a risk-based audit strategy across cybersecurity, cloud environments, data platforms, systems architecture, software development, and operational resilience.
Mentor teammates by providing day-to-day technical input on IT controls, emerging technologies, and audit methodologies.
Leverage analytics, automation, and AI to enhance risk assessments.
Coordinate and oversee risk-based audit and control monitoring activities across complex technical environments.
Identify material risks instead of focusing on low-value compliance issues.
Analyze system configurations, process flows, security architectures, and automated controls.
Explain complex technical issues to executives.
Partner with technology leaders, cybersecurity teams, engineering groups, and first-line operators to build trusted relationships.
Evaluate control effectiveness, identify gaps, and recommend improvements.
Guide the development of remediation and enhanced control practices.
Build advanced audit capabilities using data analytics, automation, and AI.
Improve audit scoping, sampling, testing depth, and reporting clarity.
Stay current on emerging threats, evolving technologies, and industry developments.