Manager Internal Audit (IT)

Overview

This role supports the organization’s Global IT internal audit function. Reporting to the Director of Internal Audit (IT), the Internal Audit Manager (IT) partners with internal audit teams and business process teams to perform integrated risk assessments, plan and execute audit programs, and deliver audit findings and recommendations. The position requires a positive attitude in a fast-paced environment with shifting priorities, along with managerial-level skills in analytical work, cross-functional collaboration, coaching, and influencing improvements through data-driven insights.

Responsibilities

• Collaborate with IT and business process internal audit teams on integrated risk assessments, scoping, and integrated audit programs in accordance with COSO and COBIT.
• Assist with the design and lead the execution of the IT SOX Audit program for IT General Controls (ITGCs) and IT Application Controls (ITACs), and support operational and compliance audit programs as needed.
• Manage IT internal audit team members to collaborate and execute audit plans.
• Review audit work papers to ensure a high-quality work product and provide guidance and constructive feedback to support internal auditors’ development.
• Serve as a primary point of contact for IT Audit by liaising with internal control owners and external auditors.
• Prepare internal audit reports and presentations that clearly summarize audit results.
• Provide risk-mitigation and control-improvement suggestions to management.
• Validate the resolution and implementation of corrective action plans.
• Perform other duties, special projects, and/or various internal audits across a broad range of IT controls to meet audit/project objectives, evolving business conditions and requirements, and identify process improvement opportunities.
• Stay current on regulatory and IT compliance developments and evolving best practices in compliance controls; improve technical and project management skills through on-the-job feedback, performance evaluations, and mentoring (including maintaining CPE).

Requirements

• Familiarity with a broad range of IT and Information Security products and technologies, including identity and access management, logging and monitoring, and application security.
• Hands-on knowledge and experience testing some or all of the following: Oracle EBS, Oracle Fusion, Oracle Warehouse Management System, Oracle FCCS, Salesforce, Workday, data warehouses, ETL processes, OIC and integration and logging tools.
• Strong experience with automated controls across IT environments, including system integrations, workflow approvals, configuration controls, and data integrity controls.
• Strong organizational, time-management, analytical, and communication skills; ability to work independently and in teams; strong attention to detail and documentation.
• Strong understanding of SOX 404 IT auditing standards and practical hands-on experience evaluating risk and executing internal audit programs for ITGCs, ITACs, key reports, and SOC1 audits.
• Strong understanding of compliance frameworks including COSO, COBIT, ISO, PCAOB, NIST, and other IT auditing standards.
• Working knowledge of the NIST Cybersecurity Framework and cloud infrastructure risk management is a plus.
• Experience auditing new system implementations (SDLC) for SOX control requirements is a plus.
• Ability to work with a global audit team and international Finance, Functional, and IT teams (flexible schedule).
• Proficiency in Microsoft Office (Word, Excel, PowerPoint) and experience using Lucidchart for process documentation and flowcharting.
• Experience with Tableau, PowerBI, and Oracle Fusion is a plus.

Preferred Qualifications

• Certification or active progress toward a professional certification as a Certified Information Systems Auditor (CISA), CISM, CIA, and/or CISSP.

Experience & Education

• Typically requires a Bachelor’s degree (Computer Information Systems, IT or related) and a minimum of 8-12 years related experience.
• A graduate degree may be desirable with 4 years of related experience.
• 6+ years hands-on IT audit experience, including IT SOX compliance and IT application and operating system audit experience, including at least 5 years from a public accounting firm (Big4 a plus).
• Continue developing new skills and staying abreast of applicable laws, the latest regulatory/SEC/audit requirements, and IT compliance developments.

Compensation & Benefits

• Salary: $116,600.00 - $194,400.00
• Full and comprehensive benefits program.
• Growth opportunities on a global scale.
• Access to career development through in-house learning programs and/or qualified tuition reimbursement.

Travel Required

• 5-15%

Location

• Primary location is a home office.
• No assigned workstation; office visit needs will be determined with your manager.
• Must live within commuting distance of the assigned site (typically 75 miles/120km).

Equal Opportunity Employer

An Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, age, national origin, or protected veteran status and will not be discriminated against based on disability.

Other Information

Management may assign or reassign duties and responsibilities as needed. Reasonable accommodations may be made to enable individuals with disabilities to perform essential functions.