It Audit Manager Jobs

About The Position

Requirements

• 8–12+ years of experience in IT audit, SOX compliance, IT governance, or technology risk, in Big 4, internal audit, or in-house IT GRC.
• Deep, hands-on experience with SOX 404 ITGCs and ITACs in a public company.
• Working knowledge of COSO, COBIT, and PCAOB AS 2201, and external auditor approaches to IT reliance and ITAC testing.
• Experience across modern technology environments, including cloud (AWS/Azure/GCP), SaaS, ERP (such as Oracle, NetSuite, or SAP), infrastructure, and identity/access platforms.
• Familiarity with SOC 1/SOC 2, ISO 27001, NIST, and harmonizing frameworks and audits.
• Proven ability to own programs end-to-end and drive accountability and execution across teams and senior leaders without direct authority.
• Excellent communication and executive presence, including negotiating with auditors and briefing senior leadership.
• Bachelor's degree in Information Systems, Accounting, Computer Science, or a related field.

Nice To Haves

• CISA, CISSP, CIA, CPA, or equivalent certification.
• Experience with GRC and audit tools such as AuditBoard, ServiceNow GRC, Workiva, or Archer.
• Data analytics skills such as SQL, Python, Power BI, or Tableau for full-population testing and control monitoring.
• Experience in high-growth, SaaS, or technology company environments.
• Familiarity with DevOps/CI-CD, infrastructure-as-code, and change management in agile environments.

Responsibilities

• Own the audit and governance program across IT applications, infrastructure, cloud platforms, and supporting systems.
• Maintain a complete inventory of systems, owners, and applicable audit and compliance obligations.
• Build and run an IT audit calendar coordinating SOX, internal audit, external audit, and compliance activities.
• Establish governance standards, policies, and control frameworks that apply consistently across IT.
• Assign clear control and remediation ownership, deadlines, and escalation paths with cross-functional IT leaders.
• Run governance forums and control health reviews, reporting status, risks, and overdue items.
• Hold teams accountable for control execution, evidence quality, and issue closure; escalate slipping commitments.
• Translate audit and compliance requirements into practical work for engineering and infrastructure teams.
• Own the end-to-end SOX IT program, including scoping inputs, control design, ownership, evidence, readiness testing, and issue management.
• Maintain the ITGC framework across in-scope applications, databases, operating systems, and cloud infrastructure.
• Own ITAC strategy and coverage with Finance and business-system owners, including automated controls, configurations, interfaces, calculations, and approval workflows.
• Own IPE/report validation, ITAC baselines, and segregation of duties across ERP and key financial applications.
• Design controls embedded in IT workflows such as ticketing, CI/CD, IAM, and CMDB.
• Run readiness and self-assessment testing before Internal Audit and external auditor testing.
• Rationalize overlapping controls across frameworks and drive automation and continuous control monitoring.
• Manage SOC 1/SOC 2 report reviews, CUECs, and third-party/vendor control dependencies.
• Own the IT issue lifecycle from identification and root cause through remediation planning, validation, and closure.
• Prepare management responses to audit findings and provide the IT perspective on deficiency severity with Finance, Legal, and Internal Audit.
• Report control health and remediation status to IT leadership, the CAO, and the Audit Committee as needed.
• Serve as the primary IT contact for Internal Audit and external auditors on scope, walkthroughs, evidence requests, and reliance strategy.
• Coordinate PBC requests, evidence standards, and timelines across IT teams.
• Train and enable control owners and IT leaders on audit requirements, evidence quality, and responsibilities.
• Set standards for control documentation, evidence, and issue management across IT.
• Mentor analysts and guide co-source or outsourced resources.
• Contribute to emerging governance areas such as AI and emerging technology.
• During the first 90 days, map the IT landscape, systems, control owners, and audit obligations; build relationships; and identify gaps and quick wins.
• Within six months, establish a governance cadence with clear ownership and on-time execution, and complete a readiness cycle with timely evidence and no auditor surprises.
• Within 12 months, reduce control count and manual effort through rationalization and automation, close prior-year findings, and establish a scalable IT-owned program with a consolidated audit calendar and framework.

Benefits

• Fertility assistance
• Generous parental leave policy
• Supportive and enriching culture
• Employee affinity groups