Director Information Technology Audit

Smith Arnold Partners; New York (NY); Hybrid; USD 225,000 - 250,000; Full time

Job summary

Smith Arnold Partners seeks a SVP & Director of IT Audit in Manhattan, NY (Hybrid). You will lead complex IT and cybersecurity audits, shaping a risk-based approach across technology controls, data protection, and business continuity.

As a senior leader, you will develop annual audit plans, leverage IT risk assessment findings, and communicate effectively with senior management and the Board. Prior regulatory and cybersecurity expertise is essential.

Qualifications

• 15+ years of progressive IT audit, technology risk, cybersecurity, or comparable experience.
• Bachelor's degree in Cybersecurity, IT, CS or related discipline; Master's preferred.
• Professional certifications such as CISA, CISSP, CRISC, CIPP, CGEIT, or CISM strongly preferred.
• Deep knowledge of cybersecurity, privacy, IT risk, and technology controls.

Responsibilities

• Lead complex IT and cybersecurity audits covering controls across systems, infrastructure, and processes.
• Develop a risk-based audit approach across cybersecurity, data protection, business continuity, and security.
• Lead IT risk assessment and annual audit planning in line with regulatory standards.
• Stay ahead of technology trends and regulatory developments to strengthen the IT audit program.
• Execute high-value audits, identify risks, and deliver actionable recommendations.

Skills

IT audit

Cybersecurity

Regulatory compliance

Leadership

Executive communication

Data analytics

Education

Bachelor's degree in Cybersecurity/Information Technology/Computer Science

Master's degree a plus

Tools

ITIL

COBIT

FFIEC

NYS DFS Part 500

Job description

Are you looking for a high-visibility role running an IT Audit function, working closely with senior leadership, and building a top-notch risk based department?

A highly successful New York financial institution is seeking a Technology Audit leader with executive presence, leadership capability, and a hands-on, proactive approach to audit. This role offers the opportunity to join a highly cohesive team in a progressive organization.

What are people saying about this company?

• They care about their workers
• Lots of opportunities to learn and grow

Title: SVP & Director of IT Audit

Salary: $225,000 - $250,000 +Bonus

Location: Manhattan, NY (Hybrid)

Job Description

• Lead complex IT and cybersecurity audits covering systems and application controls, technology infrastructure, IT processes, project management, and data integrity. Apply recognized frameworks and regulatory guidance, including ITIL, COBIT, FFIEC, and NYSDFS Part 500.
• Develop a dynamic, risk-based audit approach across cybersecurity, data protection, business continuity, physical and logical security, and other critical technology areas, ensuring alignment with evolving regulatory requirements and emerging risks.
• Lead the IT risk assessment process and development of the annual audit plan, incorporating industry standards, cybersecurity and privacy regulations, infrastructure risks, and emerging technologies.
• Stay ahead of technology trends, regulatory developments, and industry best practices to identify emerging risks and continuously strengthen the IT audit program.
• Execute high-value IT audits, identify key risks and root causes, evaluate mitigating controls, and deliver practical, value-added recommendations that strengthen the overall control environment.
• Leverage technology and data to perform and document audits in accordance with professional standards, ensuring clear support for audit procedures, findings, and conclusions.
• Oversee the audit issue follow-up process, evaluate remediation efforts, and determine whether corrective actions appropriately address identified risks.
• Contribute to broader Internal Audit initiatives, including reviews of new products, systems, technology implementations, and other strategic projects.

Qualifications

• 15+ years of progressive IT audit, technology risk, cybersecurity, or comparable experience, ideally within banking or financial services, with exposure to sophisticated information systems, network security, technology infrastructure, software development, and project management.
• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related discipline; Master's degree a plus.
• Professional certifications such as CISA, CISSP, CRISC, CIPP, CGEIT, or CISM strongly preferred.
• Deep knowledge of cybersecurity, privacy, IT risk, and technology controls, with the ability to help drive continuous improvement across the organization.
• Advanced understanding of information systems audit and key risk areas, including information security, logical and physical access, change management, business continuity/disaster recovery, and network technology.
• Strong knowledge of the IT regulatory environment, banking regulations, technology control frameworks, and professional internal auditing standards.
• Ability to quickly assess new and evolving risk areas, adapt to changing priorities, and develop a strong understanding of complex technologies and business processes.
• Excellent executive-level communication skills, with the presence and credibility to work effectively with senior management and Board-level committees.
• Strong technology orientation and ability to leverage appropriate tools and data to enhance audit effectiveness and efficiency.