Responsibilities
- Lead the development and maintenance of the organization's IT risk assessment to align with strategic goals.
- Plan and conduct risk-based audits focused on cybersecurity, cloud infrastructure, patching, change controls, disaster recovery, and third-party risk.
- Supervise audit team members, promoting teamwork, innovation, and ongoing professional growth.
- Create clear and effective audit reports that deliver meaningful insights to technical and executive audiences.
- Oversee compliance with regulatory standards, coordinate internal audits, and work with external auditors to strengthen coverage.
- Identify process improvements in IT operations, challenge existing methods, and propose modern solutions.
- Maintain current knowledge of evolving IT trends, technologies, and control frameworks to adapt audit practices accordingly.
- Work closely with IT and business leaders to align on risk priorities and opportunities for enhancement.
Requirements
- Bachelor’s degree in Computer Science, Information Systems, Accounting, or a related discipline, or equivalent professional experience.
- Hold a CISA certification or equivalent, or demonstrate a commitment to obtaining one.
- Minimum of four years of experience in IT audit, GRC, quality assurance, or SOC engagements, with additional operational IT experience preferred.
- Demonstrated experience leading audit projects, including risk evaluation, planning, execution, and reporting findings.
- Solid understanding of IT control frameworks such as COBIT, NIST, and ISO 27002, and their associated risk domains.
- Excellent communication and interpersonal abilities when interacting with all levels of management.
- Capable of assessing complex technical risks, identifying control deficiencies, and proposing actionable remediation strategies.
Nice to Have
- Possession of advanced or multiple certifications such as CPA, CISA, or CISSP.
- Technical proficiency in modern technologies including AWS, Azure, virtualization, and cybersecurity practices.
- Experience with compliance regulations including NYDFS, GLBA, CCPA, PCI, and SSAE 18/SOC.
- Hands-on experience with Audit Board or similar GRC platforms.
Benefits
- Support for professional certifications, industry conferences, and leadership development programs.
- Opportunity to work within a collaborative, inclusive, and forward-thinking team environment.
- Direct engagement with senior IT and business leaders to influence strategic initiatives.
- Access to on-site office amenities, complimentary parking, and regular team-building activities.
Other
- This position will not receive visa sponsorship for employment visas such as H-1B or TN.
- Includes direct supervision of audit staff, covering daily tasks, training, and career progression.
The company does not offer employment visa sponsorship or immigration support for this role.