Senior Manager, Internal Audit IT

About the role

This role involves leading the full lifecycle of IT and security audits, covering areas like cloud infrastructure, security operations, identity management, data protection, and third-party risk. The Senior Manager will ensure these audits are comprehensive and span key products and services. Success in this position means consistently delivering impactful audits that enhance the company's control environment.

The Senior Manager will build and mentor a global team of internal auditors, including co-sourced personnel, focusing on performance management and talent development across different regions. This leadership aspect extends to collaborating with risk, compliance, and security teams to streamline testing and maximize control coverage, fostering an integrated assurance approach.

A key part of the role is to communicate technology and security control effectiveness to senior leadership, including the Head of Internal Audit and the Audit Committee. This involves distilling complex information into clear reports on emerging risks and root causes. The manager will also drive continuous improvement within the audit function by integrating data analytics, automation, and generative AI to modernize audit execution and monitoring.

The annual base salary for this role ranges from $201,365 to $236,900 USD, with total compensation potentially including equity, bonus eligibility, and benefits.

Skills that matter here

• internal audit: This role requires over 12 years of experience in internal audit, specifically focusing on IT and information security, or equivalent experience in first/second-line technology/security roles with significant controls and audit exposure.
• cloud infrastructure: The manager will lead audits covering cloud infrastructure and possess deep technical knowledge of cloud-based technology stacks and security configurations.
• cybersecurity: The position involves leading global IT audit portfolios that include cybersecurity and requires deep technical knowledge of cloud security configurations and enterprise IT operations risks.
• NIST, COBIT, and ITIL: The role requires working fluency with industry frameworks such as NIST, COBIT, and ITIL to guide audit practices.
• generative AI: The manager is expected to drive the adoption of generative AI to modernize IT and security audit execution, including continuous monitoring and automated evidence retrieval, while maintaining human oversight.
• leadership: Proven leadership experience is essential for building, mentoring, and managing global audit teams, including co-sourced resources and indirect reports across various time zones.

Who this role suits

• A person who thrives on leading complex, cross-functional projects and is adept at navigating diverse regulatory environments.
• Someone with a strong background in technology and security controls, capable of providing independent challenge while partnering with technical leadership.
• An individual committed to continuous improvement, eager to integrate new technologies like data analytics and AI into audit processes.
• A leader who excels at developing global teams and communicating complex technical information to executive-level stakeholders.

From the employer

• Own the end-to-end delivery of complex, cross-functional IT and security audits covering cloud infrastructure, security operations, identity and access management, data protection, vendor/third-party risk, and key products and services.
• Lead and develop a high-performing global team of internal auditors and co-sourced resources, setting goals, coaching talent, managing performance, and building succession pipelines across regions.
• Drive integrated assurance across the three lines of defense by partnering with first and second line risk, compliance, security, and technology teams to rationalize testing and maximize control coverage.
• Shape executive-level reporting on technology and security control effectiveness, distilling key themes, emerging risks, and root causes into clear materials for senior management, the Head of Internal Audit, and the Audit Committee.
• Partner with technology and security leadership across Engineering, Security, Infrastructure, and Product to provide independent challenge on major initiatives (e.g., cloud migrations, new product launches, architecture changes) without compromising third-line independence.
• Build continuous improvement into the audit function by driving adoption of data analytics, automation, and generative AI to modernize IT and security audit execution, including continuous monitoring and automated evidence retrieval.

• 12+ years of experience in internal audit with deep focus on IT and information security, or in first-line / second-line technology/security roles with significant controls and audit exposure.
• Demonstrated success leading global, cross-functional IT audit portfolios spanning cloud, infrastructure, cybersecurity, and third-party risk across multiple regulatory jurisdictions (US, EMEA, APAC).
• Deep technical knowledge of cloud-based technology stacks, software development lifecycles, cloud security configurations, and enterprise IT operations risks and controls.
• Relevant professional certifications (e.g., CISA, CISSP, CIA, CPA) and working fluency with frameworks such as NIST, COBIT, and ITIL.
• Proven leadership experience building, mentoring, and managing global audit teams, including co-sourced resources and indirect reports across time zones.
• Utilizes generative AI responsibly, maintaining human oversight to deliver business-ready outputs and drive measurable improvements in workflow efficiency, cost, and quality.

• Base salary varies by location (see range below). Total compensation may also include equity and bonus eligibility, and benefits (medical, dental, vision, 401(k)).
• Annual base salary range (excluding equity and bonus): $201,365—$236,900 USD.