Technology Audit Manager

What you'll be doing…

As a Manager of Technology/Cybersecurity Internal Audit, you'll be a trusted advisor and partner to the business — helping it move faster and smarter with objective insight into risk. You'll gain exposure to diverse aspects of our business through direct collaboration with leaders, playing a pivotal role in executing and leading risk-based engagements and strengthening testing methodologies and evidence standards.

• Be BOLD Standard: Act with agility to solve real customer problems, practice thoughtful candor, and take ownership of delivering impactful, ethical outcomes over mere activity.

Risk-based engagement design

• Bring a risk-based point of view to every engagement, focusing on the areas of highest risk and recommending the approach — audit, advisory, or a blend — that will deliver the most value.
• Lead or support the end-to-end execution of complex engagements, with a focus on cybersecurity and technology, ensuring compliance with internal audit methodology, high-quality preparation and review of workpapers, and proper vetting of observations, including leading vetting calls with process owners. Communicate results and risk ratings to management and process owners in terms of business impact, not just the control failure.
• Design and execute engagement programs across technology and cybersecurity domains, including general and advanced IT controls.
• Use problem solving and critical thinking to independently perform due diligence on potential observations — identifying control deficiencies, process owners, and mitigating controls, evaluating risk implications, and drawing appropriate conclusions. Draft observations and audit reports that include mitigating factors and risk analysis.
• Develop and advise on corrective action plans in accordance with IIA standards, and support management’s execution through to successful remediation.
• Continuously reassess and adjust the scope of your engagements as risk shifts so the focus keeps pace with the business.
• Support advisory engagements and special projects that provide proactive risk insight during major transformation initiatives — providing an early risk and controls perspective in the design phase rather than after the fact.
• Collaborate with Enterprise Risk Management, Compliance, and other assurance providers to support an integrated view of enterprise risk.
• Welcome and act on feedback from process owners following engagements to help enhance the value Internal Audit delivers.
• Adopt and use self-service data analytics tools (e.g., SQL/BigQuery, Qlik, Alteryx, or similar) and enterprise GenAI assistants, ensuring your use strengthens testing rigor and efficiency without compromising evidence standards.
• Apply appropriate governance and control frameworks when your engagements touch AI-enabled or automated decision-making systems and know when to bring in specialist expertise.

…