IT Internal Audit Manager

General Information

• Job Title: IT Internal Audit Manager
• Department / Function: Internal Audit (Central Function)
• Reporting Line: Internal Audit Director
• Location: Any
• Employment Type: Full-time, Permanent employment contract
• Leadership Responsibility: No
• Job Purpose

Responsibilities

The IT Internal Audit Manager is responsible for leading and supervising technology-focused Internal Audit assurance and advisory engagements covering information technology, cybersecurity, data governance, digital transformation, operational resilience, and technology-enabled business processes. The role contributes to protecting and enhancing organizational value through independent assessment of:

• IT governance
• Information security
• Cybersecurity controls
• IT operations
• Technology risk management
• Data integrity
• Digital transformation initiatives
• IT-enabled internal controls.

The Role Operates In Alignment With

• IIA Global Internal Audit Standards (2024)
• Internal Audit methodology
• Technology risk frameworks
• Applicable regulatory and supervisory requirements
• Organizational governance expectations.

3.1 IT Audit Engagement Management

• Lead and manage IT-focused assurance and advisory engagements from planning through reporting and follow-up
• Perform technology risk assessments and develop audit scopes, objectives, testing strategies, and engagement plans aligned with organizational technology risks
• Supervise engagement teams and allocate resources effectively to ensure timely and high-quality delivery
• Ensure IT audit engagements comply with:
  • Internal Audit methodology
  • IIA Standards
  • QAIP requirements
  • Technology audit best practices
• Monitor engagement progress, resource utilization, quality standards, and timelines.

3.2 Technology Assurance & Risk Assessments

• Lead and supervise audits covering:
  • IT governance
  • IT General Controls (ITGCs)
  • Cybersecurity
  • Identity & Access Management (IAM)
  • Change management
  • Cloud services
  • Infrastructure and operations
  • Data governance and data integrity
  • ERP and core business systems
  • Digital transformation programs
  • Third-party technology risks
  • Operational resilience and disaster recovery
  • AI and emerging technology risks.
• Assess design and operating effectiveness of technology-related controls and identify control weaknesses, vulnerabilities, and governance gaps
• Evaluate adequacy of:
  • Cybersecurity frameworks
  • Monitoring processes
  • Incident response capabilities
  • Recovery planning
  • Technology risk management governance
• Evaluate technology risks associated with:
  • Outsourcing
  • Cloud computing
  • Data privacy
  • Automation
  • Emerging technologies.

3.3 Reporting & Stakeholder Communication

• Draft and review clear, concise, and risk-focused IT audit reports and stakeholder communications
• Present audit observations, recommendations, and technical risk implications to management and Internal Audit leadership
• Communicate complex technology risks to non-technical stakeholders clearly and effectively
• Facilitate meetings, walkthroughs, risk discussions, and remediation reviews with business and technology stakeholders
• Escalate significant technology risks, cybersecurity concerns, or control weaknesses appropriately.

3.4 Audit Methodology, Data Analytics & Technology Innovation

• Promote effective use of:
  • Data analytics
  • Continuous auditing
  • Automated control testing
  • AI-enabled auditing techniques
  • Technology-enabled assurance approaches
• Utilize audit management tools and data analytics platforms effectively (e.g., Optro, TeamMate+, Power BI, analytics tools)
• Support development and enhancement of IT audit methodologies, testing approaches, and technical audit procedures
• Identify opportunities to modernize Internal Audit practices through automation, analytics, and emerging technologies
• Contribute to continuous improvement initiatives related to IT audit quality, efficiency, and innovation.

3.5 Quality Assurance & Improvement Program (QAIP)

• Ensure IT audit engagements conform with:
  • IIA Standards
  • Internal Audit methodology
  • QAIP expectations
  • Technology audit quality requirements
• Perform engagement-level quality reviews of workpapers, evidence, testi