About the role

AI summarised

The IT Audit Manager is responsible for planning, executing, and leading information technology audits to assess risk, ensure compliance, and evaluate the effectiveness of IT controls and systems. This role involves collaborating with stakeholders across the organization to identify vulnerabilities, recommend improvements, and support governance, risk, and compliance (GRC) initiatives. The position requires strong analytical skills, knowledge of IT frameworks, and experience in audit methodologies.

Consumer ElectronicsOnsiteAudit

Key Responsibilities

Plan and execute IT audit engagements in accordance with audit standards and methodologies
Assess the design and operating effectiveness of IT general and application controls
Identify risks and control weaknesses in IT infrastructure, applications, and data management
Evaluate compliance with internal policies, regulatory requirements, and industry frameworks (e.g., ISO 27001, NIST, COBIT)
Conduct vulnerability assessments and review of security configurations and access controls
Interview IT and business stakeholders to understand processes and control environments
Prepare clear, concise audit reports with findings, root cause analysis, and actionable recommendations
Present audit results to management and audit committees, facilitating discussions on remediation
Track and follow up on management action plans to ensure timely resolution of audit issues
Contribute to the development and improvement of the internal audit function’s IT audit program

Requirements

Bachelor’s degree in Information Technology, Computer Science, Accounting, Finance, or a related field
Minimum of 5 years of experience in IT auditing, information security, or IT risk management
Professional certification such as CISA, CISSP, or CISM is required or strongly preferred
In-depth knowledge of IT governance frameworks including COBIT, ITIL, ISO 27001, and NIST CSF
Experience with IT general controls (ITGC), application controls, and cybersecurity risk assessments
Familiarity with audit management tools and GRC platforms (e.g., RSA Archer, ServiceNow GRC, MetricStream)
Strong understanding of networking, operating systems, databases, and cloud environments (e.g., AWS, Azure)
Ability to interpret technical controls and translate findings into business-risk language
Excellent written and verbal communication skills for reporting to technical and non-technical audiences
Demonstrated ability to manage multiple audit projects independently and meet deadlines
Experience working in regulated industries such as finance, healthcare, or technology is a plus
Knowledge of data analytics techniques and tools (e.g., ACL, IDEA, Power BI) for audit testing is advantageous
Strong analytical, problem-solving, and critical thinking skills with attention to detail
Upholds high ethical standards and maintains confidentiality of sensitive information