Director - Digital Technology Audit

Constellation; Kennett Square (Chester County); On-site; USD 195,000 - 217,000; Full time

Job summary

Constellation seeks a Director of IT Internal Audit to lead technology risk, cyber resilience, and data governance initiatives. You will partner with the CIO, CISO, and senior leaders to shape a risk-based audit strategy and deliver assurance across IT-enabled processes.

The role oversees ITGCs, application controls, cloud security, and analytics, driving automation and data-driven insights. A 12+ year IT audit background and strong leadership are required.

Qualifications

• Bachelor’s degree in information systems, computer science, engineering, accounting, finance, business administration, or related field.
• 12+ years of progressive experience in IT internal audit, technology risk management, cybersecurity, assurance, or equivalent.
• Proven experience leading a team of risk-based IT auditors across infrastructure, cybersecurity, cloud, data management, IAM, disaster recovery, and related processes.
• Significant experience evaluating IT General Controls (ITGCs) and automated controls for SOX compliance.
• Track record delivering digital transformation initiatives, audit analytics, and automation.
• Deep understanding of cybersecurity frameworks, data governance, and technology risk management.

Responsibilities

• Own the end-to-end IT, cybersecurity and digital audit strategy and portfolio.
• Develop risk-based audit plans informed by threats, strategic initiatives, and regulatory developments.
• Lead enterprise IT audit engagements with defined scope, objectives, and methodologies.
• Oversee assurance activities related to ITGCs, application controls, cybersecurity, IAM, cloud technologies, data governance, and resilience.
• Drive initiatives to optimize controls and reduce total cost of risk.
• Lead digital analytics roadmap, automation, and AI-enabled risk assessment capabilities.
• Advise CIO, CISO, and senior leadership on technology risk and cyber resilience.
• Build partnerships across Internal Audit, Enterprise Risk, Compliance, Security, and external assurance.
• Coach and develop a high-performing IT audit and analytics team.

Skills

IT audit

Cybersecurity

Risk management

Leadership

Data analytics

SOX compliance

Cloud technologies

Stakeholder comms

Education

Bachelor's degree in related field

Advanced degree

Professional certifications (CISA, CISSP, CIA, CPA)

Tools

Audit analytics tools

ERP/GRC software

Job description

Who We Are

As the largest private-sector power producer in the world and the nation's largest producer of clean and reliable energy, Constellation is focused on our purpose: lighting the way to a brilliant tomorrow for all. We have been the leader in clean energy production for more than a decade, and we are cultivating a workplace where our employees can grow, thrive, and contribute. Now integrated with Calpine, our portfolio includes 55 gigawatts of capacity from nuclear, natural gas, geothermal, hydro, wind and solar facilities, with the generating capacity to power the equivalent of 27 million homes.

Who We Are

As the largest private-sector power producer in the world and the nation's largest producer of clean and reliable energy, Constellation is focused on our purpose: lighting the way to a brilliant tomorrow for all. We have been the leader in clean energy production for more than a decade, and we are cultivating a workplace where our employees can grow, thrive, and contribute. Now integrated with Calpine, our portfolio includes 55 gigawatts of capacity from nuclear, natural gas, geothermal, hydro, wind and solar facilities, with the generating capacity to power the equivalent of 27 million homes.

Our culture and employee experience make it clear: We are powered by passion and purpose. Together, we're creating healthier communities and a cleaner planet, and our people are the driving force behind our success. At Constellation, you can build a fulfilling career with opportunities to learn, grow and make an impact. By doing our best work and meeting new challenges, we can accomplish great things. Join us in meeting the country's energy needs today and tomorrow.

Total Rewards

Constellation offers an extensive selection of benefits and rewards to help our employees thrive professionally and personally. We provide competitive compensation and a wide-range of benefits that support both employees and their families, helping them prepare for the future. In addition to highly competitive salaries, eligible employees are offered a bonus program, 401(k) with company match, employee stock purchase program; comprehensive medical, dental and vision benefits, including robust wellbeing programs; disability and life insurance benefits; paid time off for vacation, holidays, and sick days; and much more.

Expected salary range

of $195,300 to $217,000, varies based on experience, along with comprehensive benefits package that includes bonus and 401(k).

Primary Purpose Of Position

The Director, IT Internal Audit provides strategic risk leadership for the Company's technology and cybersecurity assurance program and serves as a key risk advisor on technology risk, cyber resilience, data governance, and digital transformation. This role is responsible for developing and executing a risk-based IT audit strategy, overseeing SOX IT assurance activities, advancing data-driven audit capabilities, and providing Management and the Chief Audit Executive with clear, decision-useful insights regarding emerging technology and cyber risks.

Primary Duties And Accountabilities

Lead IT, Cyber and Digital Risk-Based Audit Program

• Own the end-to-end IT, cybersecurity and digital audit strategy and portfolio, ensuring comprehensive coverage of the enterprise's most significant technology, cyber, data, and IT-enabled business risks.
• Develop and maintain a dynamic, risk-based audit plan informed by emerging threats, strategic initiatives, regulatory developments, technology transformation activities, and enterprise risk assessments.
• Develop and lead enterprise wide IT audit and advisory engagements, establishing scope, objectives, and methodologies using a risk based approach aligned to business strategy, technology initiatives, and emerging IT and cybersecurity risks.
• Oversee assurance activities related to IT General Controls (ITGCs), application controls, cybersecurity, identity and access management, cloud technologies, data governance, resilience, and IT-enabled business processes.
• Drive initiatives to optimize technology controls and reduce total cost of risk management.

Drive Internal Audit's Digital Strategy

• Serve as the functional owner for Internal Audit's digital and analytics strategy, establishing a roadmap to increase automation, continuous monitoring, data-driven assurance, and scalable audit execution.
• Evaluate and implement audit technologies, advanced analytics, artificial intelligence use cases, and data-enabled risk assessment capabilities that enhance audit effectiveness and efficiency.
• Champion innovative approaches to risk identification and audit delivery through the strategic use of technology and data.

Executive Technology Risk Advisor

• Serve as a strategic advisor to the CIO, CISO, Digital leadership, and other senior stakeholders on technology risk, cyber resilience, governance, and control effectiveness.
• Translate complex technology and cybersecurity risks into concise and actionable insights for Executive Management and the Audit Committee.
• Build strong partnerships across Internal Audit, Enterprise Risk Management, Compliance, Security, and external assurance providers to ensure coordinated risk coverage.

Audit Team Leader

• Develop, coach, and lead a high-performing team of IT audit, cybersecurity, and analytics professionals while fostering innovation, technical excellence, and continuous improvement across the Internal Audit function.

Leadership & Behavioral Expectations

• Transformational Audit Leadership: Drives a forward-looking audit agenda that balances core assurance with transformation, technology, and emerging risk coverage.
• Digital Leadership: Demonstrates a digital-first mindset and promotes innovative, data-driven approaches to assurance and risk management.
• Business Acumen and Strategic Orientation: Understands the business, balances delivery of core assurance responsibilities with modernization and transformation initiatives that improve audit and business process effectiveness, efficiency, and stakeholder value.
• Change Leadership and Stakeholder Alignment: Builds trust across business leaders, risk partners, and external assurance providers while promoting consistency, accountability, and continuous improvement during change.
• Executive Presence: Establishes credibility and influence with executive leadership, technology management, and Audit Committee members through sound judgment and trusted advisory relationships.

Minimum Qualifications

• Bachelor’s degree in Information Systems, Computer Science, Engineering, Accounting Finance, Business Administration, or a related field.
• 12+ years of progressive professional experience, including significant leadership responsibility within IT internal audit, technology risk management, cybersecurity, assurance, or a comparable control focused environment.
• Demonstrated experience leading a team of risk-based IT auditors, risk assessments or major technology risk program across infrastructure, cybersecurity, cloud technologies, data management, identity and access management, disaster recovery, and IT-enabled business processes.
• Significant experience evaluating and testing IT General Controls (ITGCs), automated controls, and technology controls supporting SOX compliance.
• Demonstrated success developing and implementing digital transformation initiatives, audit analytics programs, automation solutions, or technology-enabled assurance capabilities.
• Deep understanding of cybersecurity frameworks, technology risk management practices, and emerging technology risks, including cloud, cyber resilience, third-party risk, and data governance.
• Proven ability to influence executive stakeholders and communicate complex technology and cyber risks in a clear, business-oriented manner.
• Experience leading and developing teams, including managers and/or geographically dispersed teams.

Preferred Qualifications

• Advanced degree.
• Professional certification (e.g., CISA, CISSP, CIA, CPA, CRISC, CISM, PMP).
• Experience leading technology risk assurance programs within a Fortune 500, energy, utility, or other highly regulated industry.
• Experience developing and leveraging data analytics, automation, AI-enabled tools, or continuous auditing techniques within Internal Audit.
• Familiarity with NIST Cybersecurity Framework, COBIT, ISO 27001, NERC CIP, and other relevant technology risk and cybersecurity frameworks.