IT Internal Audit Manager

IT Internal Audit Manager

General Information

Job Title: IT Internal Audit Manager

Department / Function: Internal Audit (Central Function)

Reporting Line: Internal Audit Director

Location: Any

Employment Type: Full-time, Permanent employment contract

Leadership Responsibility: No

Job Purpose

The IT Internal Audit Manager is responsible for leading and supervising technology-focused Internal Audit assurance and advisory engagements covering information technology, cybersecurity, data governance, digital transformation, operational resilience, and technology-enabled business processes. The role contributes to protecting and enhancing organizational value through independent assessment of: IT governance, Information security, Cybersecurity controls, IT operations, Technology risk management, Data integrity, Digital transformation initiatives, IT-enabled internal controls. The role operates in alignment with: IIA Global Internal Audit Standards (2024), Internal Audit methodology, Technology risk frameworks, Applicable regulatory and supervisory requirements, Organizational governance expectations.

The IT Internal Audit Manager acts as a technical audit lead responsible for: Managing complex IT audit engagements, Supporting technology-enabled auditing practices, Promoting data analytics and audit innovation, Supervising IT auditors and audit teams, Supporting integrated assurance and digital risk oversight.

Key Responsibilities / Core Tasks

3.1 IT Audit Engagement Management

Lead and manage IT-focused assurance and advisory engagements from planning through reporting and follow-up. Perform technology risk assessments and develop audit scopes, objectives, testing strategies, and engagement plans aligned with organizational technology risks. Supervise engagement teams and allocate resources effectively to ensure timely and high-quality delivery. Ensure IT audit engagements comply with:

• Internal Audit methodology
• IIA Standards
• QAIP requirements
• Technology audit best practices

Monitor engagement progress, resource utilization, quality standards, and timelines.

3.2 Technology Assurance & Risk Assessments

Lead and supervise audits covering:

• IT governance
• IT General Controls (ITGCs)
• Cybersecurity
• Identity & Access Management (IAM)
• Change management
• Cloud services
• Infrastructure and operations
• Data governance and data integrity
• ERP and core business systems
• Digital transformation programs
• Third-party technology risks
• Operational resilience and disaster recovery
• AI and emerging technology risks

Assess design and operating effectiveness of technology-related controls and identify control weaknesses, vulnerabilities, and governance gaps. Evaluate adequacy of:

• Cybersecurity frameworks
• Monitoring processes
• Incident response capabilities
• Recovery planning
• Technology risk management governance

Evaluate technology risks associated with:

• Outsourcing
• Cloud computing
• Data privacy
• Automation
• Emerging technologies

3.3 Reporting & Stakeholder Communication

Draft and review clear, concise, and risk-focused IT audit reports and stakeholder communications. Present audit observations, recommendations, and technical risk implications to management and Internal Audit leadership. Communicate complex technology risks to non-technical stakeholders clearly and effectively. Facilitate meetings, walkthroughs, risk discussions, and remediation reviews with business and technology stakeholders. Escalate significant technology risks, cybersecurity concerns, or control weaknesses appropriately.

3.4 Audit Methodology, Data Analytics & Technology Innovation

Promote effective use of:

• Data analytics
• Continuous auditing
• Automated control testing
• AI-enabled auditing techniques
• Technology-enabled assurance approaches

Utilize audit management tools and data analytics platforms effectively (e.g., Optro, TeamMate+, Power BI, analytics tools). Support development and enhancement of IT audit methodologies, testing approaches, and technical audit procedures. Identify opportunities to modernize Internal Audit practices through automation, analytics, and emerging technologies. Contribute to continuous improvement initiatives related to IT audit quality, efficiency, and innovation.

3.5 Quality Assurance & Improvement Program (QAIP)

Ensure IT audit engagements conform with:

• IIA Standards
• Internal Audit methodology
• QAIP expectations
• Technology audit quality requirements

Perform engagement-level quality reviews of workpapers, evidence, testing approaches, an