Description
Job Details:
General Summary:
The Director of IT Audit leads the strategic execution of the organization's IT audit function, with a primary focus on IT SOX compliance, operational audits, and enterprise risk management (ERM). This role is responsible for developing and executing a risk-based audit plan, ensuring the integrity of IT controls, and driving continuous improvement across IT governance and risk practices. The Director also plays a key leadership role in mentoring and developing a high-performing audit team, fostering a culture of accountability, innovation, and professional growth. This position partners closely with senior leadership, external auditors, and cross-functional teams to ensure alignment with regulatory requirements and business objectives.
Duties & Responsibilities:
- Manage a blended team, direct report (s), project-based internal staff and co-sourced resources to drive the annual audit plan and deliver organizational value.
- Leads the IT SOX compliance program, including planning, scoping, testing, and reporting. Partners closely with internal stakeholders and external auditors to ensure accurate evaluation of financially significant systems and applications. Supports management in designing and implementing effective IT controls to mitigate risk and ensure compliance with regulatory requirements.
- Oversee the execution of operational audits, including defining scope and objectives, designing risk-based audit procedures, supervising fieldwork, and delivering actionable, value-driven insights to senior/executive stakeholders. Ensures audit outcomes support strategic decision-making and drive continuous improvement across IT operations.
- Contributes to the facilitation of the Enterprise Risk Management program, working collaboratively with peers to ensure proactive identification, assessment, tracking, and mitigation of key organizational risks. Collaborates with cross-functional teams and senior leadership to align risk management strategies and support informed decision-making.
- Develops and executes a comprehensive IT audit plan focused on key risk areas including infrastructure, cybersecurity, data governance, asset management, IT operations, application controls, third-party risk, and emerging technologies.
- Leads process improvement initiatives to enhance standardization, consistency, and compliance with IIA Global Internal Audit Standards.
- Oversee IT team development through coaching, training, and timely performance feedback to build a high-performing audit function.
- Builds and maintains strong communication channels across the IT organization and with senior and executive leadership.
- Maintains professional certifications and actively pursues continuing education to stay current with industry standards and best practices.
Knowledge, Skills and Abilities:
- Proven leadership and communication skills, with the ability to clearly articulate audit findings and recommendations to stakeholders.
- Technical expertise across IT governance, infrastructure, network operations, cybersecurity, change management, and Software Development Life Cycle (SDLC), enabling effective risk identification and control evaluation.
- Skilled in leading integrated audits, identifying and communicating business risks and opportunities, and building strong stakeholder relationships.
- Demonstrated ability to mentor and develop team members, fostering a collaborative and growth-oriented culture.
- Highly adaptable to changing environments and priorities.
- Preferred experience with GRC tools (AuditBoard, Onspring), Oracle ERP, AS400, Windows, Linux, Google Cloud, e-commerce platforms, and retail applications.
Work Experience and/or Education:
- Bachelor's degree in computer science or a related technology field required; master's degree preferred.
- Ten or more years of total work experience, including a minimum of five years of IT Audit experience with leadership responsibilities required.
- Certification in Internal Auditing (CIA/CISA) and/or other IT certification (CISSP/CISM/CGEIT) required.
- Preferred experience in public accounting, Fortune 500 internal audit, or risk consulting.
Apply on company website
Find Connections via Linkedin
