Director IT, Internal Audit

Overview

This role builds and leads a best-in-class Internal Audit function with a focus on risk-based IT audit engagements. Working directly with the Head of Internal Audit, the Director will own end-to-end IT audit delivery while developing the function’s technology capability and shaping strategic priorities.

Responsibilities

• Deliver IT audit and advisory engagements end-to-end with executive-quality standards, clear ownership, and defensible scope.
• Apply independent audit judgment consistently across engagements by:
  • Calibrating scope to actual risk exposure
  • Conducting rigorous root cause analysis
  • Ensuring conclusions are well-evidenced (not driven by checkbox compliance)
• Apply risk and control frameworks with sound judgment, translating findings into clear, actionable narratives for both technical and non-technical audiences.
• Use hands-on expertise with cloud and data platforms, including AWS, GCP, Datadog, and Okta, to assess controls and design practical, effective solutions.
• Develop a high-performing audit team through structured coaching, clear expectations, and tailored development plans.
• Integrate AI risk and governance considerations into the audit approach, including GenAI and agentic AI model risk, bias, transparency, and data privacy.
• Adopt AI-enabled tools and data analytics to expand coverage, improve efficiency, and enhance audit impact.
• Implement and administer the Workiva platform to support the first-time build of a risk-based Internal Audit operating model aligned to IIA Standards.
• Streamline controls and reduce manual effort to improve operational efficiency across the audit function.
• Build and maintain productive relationships with business and cross-functional partners, including Finance, Legal, ERM, Compliance, IT, Engineering, and Security.
• Serve as a trusted advisor across technology and data teams, shaping audit approaches for complex, AI-driven environments.

Requirements

• 12-15 years of progressive professional experience, including at least 5 years in a leadership role overseeing IT risk-based audits at a high-growth, global company.
• Demonstrated experience building a risk-based Internal Audit function from the ground up, with working knowledge of IIA Standards and the ability to apply them in practice.
• Proven track record delivering risk-based audits in a fast-paced, agile technology environment with competing priorities and evolving risk landscapes.
• Exceptional written communication skills, including the ability to produce executive-quality audit reports with minimal revision.
• Ability to translate complex technical findings into clear, actionable narratives.
• Collaborative, relationship-oriented approach with the ability to influence and partner effectively across all levels of the organization.
• Ability to translate deep technical expertise into impactful, actionable insights for both technical and non-technical audiences.

Preferred Qualifications

• CISA, CRISC, or CIA certification (one or more strongly preferred).

Compensation & Benefits

• Highly market-competitive compensation and benefits in each location where employees work.
• This role is remote. Base pay range depends on permanent work location.
• Offers may vary based on factors including candidate experience and required skills.
• Eligible for a new hire equity grant as well as annual refresh grants.

US base pay ranges

• CA, NY, CT, NJ: $245,000—$258,500 USD
• WA: $235,000—$248,000 USD
• OR, DE, ME, MA, MD, NH, RI, VT, DC, PA, VA, CO, TX, IL, HI: $224,000—$236,500 USD
• All other states: $204,000—$215,500 USD

Location

Remote. US base pay ranges are listed above based on permanent work location.