Responsibilities
- Identify and assess technology risks and evaluate the design and operating effectiveness of IT general controls (ITGCs), application controls, and security controls
- Lead and execute risk-based IT audits, special projects, and advisory reviews aligned with the annual audit plan
- Perform IT control walkthroughs and testing, documenting results and conclusions with clear, complete, and well-supported audit evidence
- Communicate audit findings, root causes, and actionable recommendations to management and track remediation activities to closure
- Maintain strong alignment with SOX, SOC 1, SOC 2, HITRUST, and other relevant regulatory or assurance frameworks
- Lead audits and assessments of artificial intelligence (AI), generative AI, robotic process automation (RPA), and advanced analytics, including governance, security, and control design
- Evaluate the organization’s AI governance framework, policies, accountability structures, and risk management practices
- Assess risks related to data quality, model integrity, bias, explainability, privacy, and third-party AI solutions
- Advise leadership on emerging technology risks and evolving regulatory expectations while preserving audit independence
- Lead the implementation of AI-enabled capabilities within the internal audit function to improve audit efficiency, effectiveness, and risk coverage
- Provide risk-based assurance and advisory support for major system implementations, cloud migrations, and enterprise applications
- Conduct pre-implementation and post-implementation reviews, focusing on governance, access controls, data migration, change management, and security
- Engage with project teams at key milestones to identify control gaps early, while maintaining appropriate independence
- Lead, coach, and develop audit team members, ensuring high-quality audit execution and professional growth
- Review audit workpapers and reports to ensure compliance with internal audit standards and minimal review comments
- Build effective relationships with IT, security, data, compliance, and business leaders to stay informed of key initiatives and risks
- Contribute to the continuous improvement of internal audit methodologies, tools, and use of data analytics
- Support audit committee materials, risk assessments, and special initiatives as requested by leadership
Requirements
- Bachelor’s degree in Accounting, Finance, Information System, Computer Science, or related field or equivalent work experience
- 8 or more years of experience in IT audit, technology risk, or information security, including infrastructure, applications, and data environments
- Strong understanding of IT controls, risk management frameworks, and audit methodologies
- Experience auditing cloud platforms, complex systems, and regulated environments
- Practical knowledge of cloud computing, cybersecurity, system implementations, and data governance
- Strong analytical, communication, and stakeholder engagement skills
- Ability to lead teams, influence outcomes, and operate effectively in a fast-paced environment
- Ability to sit and/or stand for long periods of time
- Ability to lift up to 15 pounds
- CPA, CIA, CISA, CISSP, CRISC, CISM, CASP, or similar certifications
Nice to Have
- 2 or more years of people management experience
- Familiarity with AI, automation, and data analytics in a risk and control context
- AI, data analytics, or cloud-related certifications
Benefits
- career coaches
- training opportunities
- competitive benefits
- HMO and PPO options
- 401k match
- Employee Stock Purchase Program
- tuition reimbursement
- leadership development
- 16 days of paid time off plus holidays
- wellness courses
- highly engaged employee resource groups
Additional Information
- Occasional travel required
