Senior Information Technology Audit Manager

About the Role

We are looking for a Senior IT Audit Manager to join our team focusing on Risk Management and Internal Audit. This position entails managing comprehensive IT audit projects, supporting compliance efforts including US SOX testing, ISO 27001 standards, and SOC 1 and SOC 2 audits. The manager will evaluate information technology systems, their controls, and business procedures to enhance control frameworks, adhere to regulations, and minimize operational risks.

Key Responsibilities

• Perform IT risk assessments covering various domains such as IT infrastructure, cloud platforms, data governance, cybersecurity, and application systems.
• Assess the efficacy of IT General Controls (ITGCs) and IT Application Controls (ITACs) and their implications on business workflows, automation, and compliance obligations.
• Work closely with IT teams on system modifications, ensuring ownership and accountability alignment between infrastructure, operations, and control design.
• Support US SOX compliance testing and assist with ISO 27001, SOC 1, SOC 2, and other related audit and assurance exercises.
• Detect and evaluate risks from process alterations, system integrations, and automation, proposing enhancements to control mechanisms.
• Champion ongoing improvements to internal controls, governance frameworks, and risk management policies.
• Contribute to governance meetings by sharing insights on process optimizations, control effectiveness, and risk reduction.
• Produce thorough audit documentation, reporting findings and recommendations to both technical and business stakeholders.

Required Qualifications and Experience

• Bachelor’s degree in Information Technology, Computer Science, Accounting, Finance, or a related field.
• Between 4 and 6 years of experience in IT audit, cybersecurity, technology risk, consulting, or GRC, ideally in internal or external audits or within US-listed companies.
• Practical experience conducting ITGC and ITAC audits.
• Preference for candidates with Big Four audit firm experience.
• In-depth knowledge of cybersecurity risk frameworks such as NIST SP 800-53, ISO 27002, ITIL, and beneficial familiarity with ITU, GSMA, and 3GPP standards.
• Expertise in best practices around cybersecurity including risk management, vulnerability scanning, incident response, cloud security controls, and assurance activities.
• Experience with US SOX compliance, ISO 27001, SOC audit procedures, and Segregation of Duties (SoD) reviews is advantageous.
• Professional certifications like CIA, CISA, CISSP, or equivalents are desirable.
• Strong analytical and critical thinking abilities, capable of leveraging data, dashboards, and spreadsheets to derive actionable insights.
• Business acumen to interpret business processes, identify challenges, and define key performance metrics.
• Effective communicator able to translate complex IT concepts into business terms and present audit findings to varied audiences.
• Excellent interpersonal and stakeholder management skills with capability to coordinate multiple priorities in pressurized environments.
• Organized project coordinator capable of managing several engagements, deadlines, and deliverables simultaneously.
• Proactive and accountable with a focus on innovation and cross-team collaboration for continuous improvement.
• Basic familiarity with AI technologies, including knowledge about large language models (LLMs) and their business applications and limitations.

What We Offer

• A collaborative and inclusive workplace that values diversity and authentic professional perspectives.
• Dynamic and rapidly expanding company exposure with insights into industry trends and emerging technologies.
• Meaningful project involvement with direct influence on business and governance development.
• Opportunities to engage in new initiatives focusing on improving business processes, systems, and controls.
• A company culture promoting personal responsibility, autonomy, continual learning, and career development.
• Competitive employee benefits package, complemented by training, mentorship, and opportunities for professional growth.

Additional Information

License: EA Licence No: 19C9807