Cybersecurity IT Audit Manager

CBRE; Richardson (TX); On-site; USD 120,000 - 180,000; Full time

Job summary

CBRE seeks a Cybersecurity IT Audit Manager to lead audit engagements across CBRE’s global units, focusing on IT controls, cybersecurity, and risk management. The role requires strong analytical and communication skills to deliver actionable insights to senior leadership and stakeholders.

As part of the Internal Audit team, you will develop testing strategies, draft reports, and coordinate execution of audits in line with company standards, procedures, and regulatory expectations.

Qualifications

• Experience assessing IT controls and cybersecurity operations.
• Ability to design audit procedures addressing risk and compliance.
• Strong communication to present findings to stakeholders.

Responsibilities

• Lead audits of IT and cybersecurity processes and controls.
• Develop audit approach and testing strategy for assigned audits.
• Draft and coordinate audit procedures and user stories.
• Communicate audit findings to stakeholders and audit team.
• Ensure timely, high-quality audit deliverables within budget.
• Perform testing to verify control effectiveness and root causes.

Skills

Cybersecurity

Data Analytics

Auditing

Stakeholder Communication

Critical Thinking

Agile Auditing

IT Controls

Risk Assessment

Job description

About the Role:

CBRE’s Internal Audit (IA) is an independent, solution-focused business partner that provides insight to protect CBRE's brand and drive positive change. IA provides objective assurance and guidance to help CBRE leaders across our global enterprise identify, communicate and mitigate risk exposure that could threaten our company's ability to achieve strategic objectives. In short—this team helps CBRE reach business and functional goals by identifying opportunities for improvement.

IA is an early adopter of agile auditing and utilizes agile to serve our clients in the most efficient/effective manner possible. The Internal Audit Manager will be an engaged scrum team member who leads audit engagements on CBRE’s Enterprise Risks.

This role will have the primary responsibilities of understanding business processes, assessing risks to business objectives, evaluating control effectiveness and delivering insights to stakeholders and senior leadership. The IT Audit Manager will possess operational internal audit experience, an interest in cybersecurity, data analytics, Artificial Intelligence, strong communication skills and advanced critical thinking.

What You'll Do:

The Cybersecurity IT Audit Manager will lead audit and project work to evaluate key risks and the adequacy of controls within CBRE’s global business units and key business processes. Core responsibilities for this position include, but are not limited to:

• Contributing to the development of an audit approach and testing strategy for assigned audits to ensure key business risks and controls are evaluated.
• Drafting, coordinating and participating in the completion of audit procedures (i.e., user stories).
• Communicating audit findings to the audit team and stakeholders.
• Providing peer reviews of workpaper documentation to ensure the retained documentation supports the audit work performed.
• Completing and delivering projects and related deliverables on time, with exceptional quality and within budget.
• Performing testing verifying the effectiveness of established processes and procedures; confirming audit findings/observations identified through detailed testing.

Having professionalism and maturity to make oral and written presentations to key stakeholders throughout, and at the conclusion of, audit projects by discussing process and control deficiencies and recommending corrective actions and other suggestions to improve operational controls, mitigate risk, improve efficiencies or reduce costs:

• Preparing draft reports for review and ensuring audit comments are agreed, clear, concise and focused on the root cause of the issue and intended outcome.
• Working as a global resource and participating in audit assignments in any location, as necessary.
• Providing input into department initiatives (e.g., templates, audit manual and methodologies, etc.), as necessary.
• Interpreting policies and procedures and applying professional auditing principles and standards to test and evaluate IT and Cybersecurity operations and systems. Designing audit procedures that adequately address risk and compliance with Company standards and relevant regulations.