Manager, IT Audit

Job Description

Job Purpose

Intercontinental Exchange (ICE) is seeking an experienced IT Audit Manager to join its Corporate Internal Audit team. This role is responsible for planning, leading, and executing information technology audits to evaluate compliance with regulatory requirements, industry standards, and internal policies. The IT Audit Manager will oversee audits of business and technology functions, identify control risks, and help drive the successful execution of the annual audit plan.

 

Responsibilities

• Audit Execution and Risk Management
  • Develop and maintain a thorough understanding of ICE's exchange, clearing, and technology operations to support risk-based audit planning and execution.
  • Lead the ongoing assessment and maintenance of the audit universe and associated risk assessments to address emerging business and technology risks.
  • Design and execute audit plans, programs, and testing procedures aligned with organizational objectives and regulatory expectations.
  • Direct and perform audit testing activities, ensuring workpapers and supporting documentation meet Internal Audit standards.
  • Evaluate the adequacy and effectiveness of governance, risk management, and internal control processes.
  • Communicate audit observations, control deficiencies, and risk exposures to management and stakeholders, providing practical and actionable recommendations.
  • Build and maintain effective relationships with business and technology management to support audit activities and issue remediation efforts.
  • Lead or support special projects, investigations, and strategic initiatives as assigned.
• Information Technology Auditing
  • Assess the design and operating effectiveness of IT controls across key domains, including information security, logical access management, system development lifecycle, change management, infrastructure operations, data management, and business continuity.
  • Manage all phases of IT audits, including planning, risk assessment, fieldwork, reporting, and issue validation.
  • Develop risk-based audit approaches to evaluate technology processes supporting operational, financial, and regulatory objectives.
  • Coordinate audit requests and evidence collection for internal and external stakeholders.
  • Present complex technical risks and control issues in a clear and concise manner to both technical and non-technical audiences.
  • Monitor emerging technology, cybersecurity, and regulatory developments to enhance audit coverage and methodology.

 

Knowledge and Experience

• Bachelor's degree in Information Systems, Computer Science, Accounting, Audit, or a related field.
• 7+ years of experience in IT audit, information security, risk management, or a related discipline.
• Strong knowledge of IT control frameworks and processes, including information security, access management, change management, IT operations, and system development lifecycle controls.
• Experience managing or leading audits and mentoring junior audit staff.
• Knowledge of SOX IT General Controls (ITGCs) is preferred.
• Professional certification such as CISA, CISSP, CRISC, or equivalent is required.
• Familiarity with regulatory and industry frameworks such as FFIEC, NIST, COBIT, ISO 27001, or similar standards is preferred.
• Experience with data analytics, computer-assisted audit techniques (CAATs), scripting, or database technologies is a plus.
• Strong analytical, organizational, communication, and report-writing skills.
• Ability to manage multiple priorities and work effectively in a fast-paced environment.
• Willingness to travel up to 10-15%, including occasional international travel.