Director IT, Internal Audit

Company logo

Unlock Employer

Posted Nov 5, 2026

Remote · US Full Time
$204K – $258.5K/yr

Overview

This role will build and lead a best-in-class Internal Audit function focused on risk-based IT audit engagements, delivered to executive-quality standards. Reporting directly to the Head of Internal Audit, the Director will own end-to-end IT audit delivery while developing the team’s technology capability and defining strategic technology audit priorities.

Responsibilities

  • Deliver IT audit and advisory engagements end-to-end with clear ownership, defensible scope, and executive-quality standards.
  • Apply independent audit judgment consistently across engagements, including:
    • Calibrating scope to actual risk exposure
    • Conducting rigorous root cause analysis
    • Ensuring conclusions are well-evidenced (not checkbox-driven)
  • Apply risk and control frameworks using sound judgment and translate findings into clear, actionable narratives for both technical and non-technical audiences.
  • Use hands-on expertise with cloud and data platforms—including AWS, GCP, Datadog, and Okta—to assess controls and propose practical, effective solutions across key environments.
  • Lead team development through structured coaching, clear expectations, tailored development plans, and a culture of excellence, continuous learning, and proactive problem-solving.
  • Integrate AI risk and governance considerations into the audit approach, including GenAI and agentic AI model risk, bias, transparency, and data privacy.
  • Adopt AI-enabled tools and data analytics to expand coverage, improve efficiency, and enhance audit impact.
  • Administer and leverage the Workiva platform, supporting implementation of a risk-based Internal Audit operating model aligned to IIA Standards.
  • Streamline controls and reduce manual effort to improve operational efficiency across the audit function.
  • Build and maintain stakeholder partnerships with business leaders and cross-functional partners (Finance, Legal, ERM, Compliance, IT, Engineering, and Security) to help implement scalable controls.
  • Serve as a trusted advisor across technology and data teams, shaping audit approaches for complex, AI-driven environments.

Requirements

  • 12-15 years of progressive professional experience, including at least 5 years in a leadership role overseeing IT risk-based audits at a high-growth, global company.
  • Demonstrated experience building a risk-based Internal Audit function from the ground up.
  • Working knowledge of IIA Standards and ability to apply them in practice.
  • Track record delivering risk-based audits in a fast-paced, agile technology environment with competing priorities and evolving risk landscapes.
  • Exceptional written communication skills, including the ability to produce executive-quality audit reports with minimal revision and translate complex technical findings into clear, actionable narratives.
  • Collaborative, relationship-oriented approach with ability to influence and partner effectively across all levels of the organization.
  • Ability to translate deep technical expertise into impactful, actionable insights for both technical and non-technical audiences.

Preferred Qualifications

  • CISA, CRISC, or CIA certification (one or more strongly preferred).

Compensation & Benefits

  • This role is remote.
  • Base pay range depends on the candidate’s permanent work location.

For US-based candidates:

  • CA, NY, CT, NJ: $245,000—$258,500 USD

  • WA: $235,000—$248,000 USD

  • OR, DE, ME, MA, MD, NH, RI, VT, DC, PA, VA, CO, TX, IL, HI: $224,000—$236,500 USD

  • All other states: $204,000—$215,500 USD

  • Offers may vary based on candidate experience and skills required for the role.

  • This role is eligible for a new hire equity grant and annual refresh grants.

Location

Remote (Flex First team). Base pay is dependent on permanent work location.

US states included in the pay ranges listed above.

Remote-friendly employer

This employer operates a remote-first policy — most roles are performed remotely by default, even when a posting doesn't say so explicitly. Individual roles can have exceptions, so confirm the details with the employer.