Senior Information Technology Audit Manager

Smith Arnold Partners; Connecticut; On-site; USD 120,000 - 160,000; Full time

Job summary

Smith Arnold Partners is seeking an IT Audit Senior Manager with deep cybersecurity expertise to lead risk-focused audits and strengthen enterprise information security controls. You will partner with IT and business leaders to assess technology risks, design controls, and deliver practical remediation plans.

The role emphasizes governance, SOX ITGC awareness, and effective reporting to senior management, with opportunities to influence risk posture in a global organization.

Qualifications

• Bachelor’s degree in IT, Cybersecurity, Computer Science, Information Technology, Engineering, Accounting, or related field.
• Master’s degree is a plus.
• Strong certifications in cybersecurity / IT audit preferred.

Responsibilities

• Lead and execute IT audit and in-depth cybersecurity control reviews.
• Perform risk assessments to identify technology and cybersecurity risks.
• Become the SME for cybersecurity, including controls and frameworks.
• Evaluate information security and IT controls design/effectiveness.
• Conduct security reviews, vulnerability assessments, and pen testing.
• Partner with IT, cybersecurity, and business leadership to drive remediation.
• Prepare and present audit reports to senior management.
• Track audit findings and remediation plans to ensure timely resolution.

Skills

Cybersecurity

IT audit

Risk assessments

Communication

Leadership

Governance

Strategic thinking

Education

Bachelor's degree in IT / Cybersecurity / CS / IT / Engineering / Accounting

Master's degree

Certifications: CISA, CISSP, CISM, CRISC, CIA, CCSP, GIAC, CEH, Cloud Security

Job description

Are you looking for a high-visibility cyber risk position where you can be the subject matter expert in cybersecurity for a progressive internal audit department?

Our client, a dynamic and growing global organization, is seeking an IT Audit Senior Manager with subject matter expertise in cybersecurity. This is an outstanding opportunity for a technically strong cyber audit & risk professional who wants to play a key role in strengthening IT governance, cybersecurity controls, and enterprise risk management while partnering with business and technology leaders across the organization.

In this high-visibility role, you will evaluate the effectiveness of IT cybersecurity safeguards, and technology risk management processes, while helping the organization enhance its overall security posture and compliance framework. You’ll lead risk-focused audits, assess emerging technology risks, and provide practical recommendations that improve controls and strengthen operational resilience.

What are people saying about this company

• Great company to work for, nice people
• They seem like they care about the employees
• Flexible schedule and management friendliness

Title: Technology & Cybersecurity Senior Audit Manager

Location: New Haven County

Key Responsibilities

• Lead and execute IT audit and in depth cybersecurity control reviews
• Perform risk assessments to identify technology and cybersecurity risks across business units
• Become the SME for cybersecurity, including penetration testing, firewalls, networks, etc.
• Evaluate the design and effectiveness of information security and IT controls
• Conduct security reviews, vulnerability assessments, and penetration testing
• Partner with IT, cybersecurity, and business leadership to identify risks and drive remediation
• Prepare and present clear, actionable audit reports to senior management
• Track and monitor audit findings and remediation plans to ensure timely resolution

Qualifications

• Bachelor's degree in IT, Cybersecurity, Computer Science, Information Technology, Engineering, Accounting, or another related discipline.
• Master's degree is a plus
• Preferred Certifications: CISA, CISSP, CISM, CRISC, CIA, CCSP, GIAC, CEH and/or Cloud Security
• Approximately 8-15 years of progressive experience in cybersecurity, technology risk, cyber consulting, cyber assurance, or IT audit, with a significant focus on enterprise cybersecurity.
• Experience within a Fortune 500, Big Four Cyber Risk practice, or leading cybersecurity consulting firm strongly preferred.
• Demonstrated experience leading complex cybersecurity audits and advisory engagements across large, global organizations.
• Experience evaluating enterprise cybersecurity programs, cloud security, cyber resilience, operational resilience, and technology governance.
• Working knowledge of IT General Controls (ITGCs) and SOX requirements, with the ability to coordinate effectively with audit leaders responsible for ITGC assurance.
• Deep knowledge of cybersecurity frameworks including NIST CSF, NIST 800-53, ISO 27001, CIS Controls, COBIT, and applicable cybersecurity and privacy regulations.
• Experience partnering with Chief Information Security Officers, technology executives, and business leadership on cybersecurity risk management and governance.
• Strong executive presence with exceptional communication, presentation, stakeholder management, and report-writing skills.
• Demonstrated ability to translate complex technical risks into clear business impacts and actionable recommendations.
• Experience leveraging data analytics, automation, and continuous monitoring to enhance audit effectiveness.