Sr. Manager, IT Audit

Job Description

The Senior Manager, IT Audit is responsible for leading and overseeing NTTA’s information technology audit function, including the development and execution of risk-based audit plans, evaluation of technology risks and controls, and delivery of independent assurance and advisory services. This role provides strategic leadership for IT audit activities, helps establish and maintain the IT audit framework and methodology, and ensures alignment with professional auditing standards, organizational objectives, and emerging technology risks. The Senior Manager partners closely with executive leadership, technology management, compliance, and business stakeholders to strengthen governance, risk management, cybersecurity, and internal control processes while supporting the Authority's strategic goals. This is a hands-on leadership role that combines management of the IT audit function with direct execution of audits and advisory engagements, including personally performing audit planning, fieldwork, control testing, data analysis, and workpaper documentation as necessary.

Applicants are required to be eligible to lawfully work in the United States immediately. This position is not available for H1-B visa sponsorship.

DUTIES, FUNCTIONS, AND RESPONSIBILITIES:

Essential duties and functions, pursuant to the Americans with Disabilities Act, may include the following. Other related duties may be assigned.

• Develops and executes the annual risk-based IT audit strategy and plan, ensuring alignment with organizational objectives, technology risks, and professional standards.
• Leads and oversees, and, as necessary, performs complex IT audits, technology risk assessments, cybersecurity reviews, advisory engagements, and other assurance activities across the organization.
• Establishes and maintains the IT audit framework, methodology, quality assurance program, and audit documentation standards to support consistent and effective audit execution.
• Evaluates the effectiveness of technology governance, cybersecurity, information security, privacy, business continuity, and IT control environments, including risks associated with emerging technologies and digital transformation initiatives.
• Leads enterprise-wide technology risk assessments and provides independent, risk-based recommendations to strengthen governance, internal controls, and operational effectiveness
• Reviews audit findings, monitors remediation efforts, and validates management's corrective actions to ensure identified risks are appropriately addressed.
• Partners with executive leadership, business stakeholders, external auditors, regulators, and other assurance providers to identify emerging risks, support organizational objectives, and promote effective risk management practices.
• Presents audit results, risk assessments, and key observations to executive leadership, the Audit Committee, and other stakeholders, as appropriate.
• Leads the use of data analytics, continuous auditing, and other technology-enabled techniques to enhance audit quality, efficiency, and insights, providing hands-on support as necessary.
• Provides leadership for the IT audit function, including staff development, performance management, resource planning, budgeting, strategic initiatives, and maintaining awareness of evolving regulatory requirements and industry best practices.

Minimum Qualifications:

Education:

Bachelor’s degree in Information Systems, Information Technology, Cybersecurity, Computer Science, Accounting, Finance, Business Administration, or a related field.

Years of Experience:

Eight (8) years of related experience in information technology auditing, technology risk, information security, IT controls, internal auditing with significant IT audit responsibility, or a closely related field, including experience leading complex audits, projects, or engagements. To Include:

·         Three (3) years of supervisory experience

• Experience leading audits and assessments involving IT general controls (ITGCs), cybersecurity, user access management, change management, cloud environments, system implementations, automated controls, interfaces, data integrity, third-party technology risks, and SOC reports.
• Experience applying professional auditing, risk management, and control frameworks and standards, including IPPF, COSO, COBIT, ITIL, ISO 27001, NIST, PCI-DSS, SSAE/SOC reporting, and related compliance frameworks.
• Experience utilizing data analytics, audit management systems, computer-assisted audit techniques (CAATs), Excel, and other technology-enabled audit tools to improve audit effectiveness and efficiency.
• Experience communicating complex technology risks and audit results to executive leadership, Audit Committees, external auditors, regulators, consultants, and other stakeholders.
• Experience assessing emerging technology risks, including artificial intelligence (AI), data governance, automation, and digital transformation initiatives.
• Experience in project management, ERP implementations, regulatory compliance, public sector organizations, construction accounting, fund accounting, or other complex operational environments.

NTTA is an Equal Opportunity Employer and does not discriminate on the basis of race, color, religion, sex, sexual orientation, gender identity, age, national origin, disability or veteran status.