Director, Internal Audit, IT

Jobtailor; Nashville (TN); On-site; USD 140,000 - 200,000; Full time

Job summary

Paramount is seeking a senior IT Audit leader to drive risk-based audits across applications, infrastructure, cybersecurity, and cloud environments. You will lead a team, define scope, and deliver cost-effective recommendations to executive management.

Ideal candidates bring 10+ years in IT audit with leadership experience, familiarity with NIST/SOX/COBIT, and professional certifications such as CISA or CISSP. Strong communication and stakeholder management are essential.

Qualifications

• Ten years of progressive audit experience, including leadership in IT audit or accounting.
• BS or MS in Information Systems, Accounting, Information Systems Auditing, CS, or related field.
• Ability to work with senior leaders and establish credibility across the organization.
• Demonstrated team management and strong project management capabilities.
• Advanced knowledge of IT governance, cybersecurity, cloud security controls, and IT risk management.
• Experience applying IT and information security frameworks (NIST, SOX, COBIT).
• Experience auditing ERP environments, cloud technologies, and complex global security/compliance functions.
• Professional certifications such as CISA, CISSP, CIA, or CPA preferred.

Responsibilities

• Lead and supervise a team of audit professionals.
• Define audit scope and identify control deficiencies, security weaknesses, and improvement opportunities.
• Assess risks across applications, infrastructure, cybersecurity, cloud, and technology initiatives.
• Plan audits, allocate resources, and set priorities.
• Coordinate audits with IT and business management; evaluate staff performance.
• Draft, edit, and review audit reports and executive summaries.
• Coach IT Audit Managers and Staff; monitor emerging cybersecurity risks and trends.
• Partner with stakeholders on continuous improvement and risk management initiatives.

Skills

IT Audit Leadership

Cybersecurity Risk Management

IT Governance

Audit Planning

Stakeholder Engagement

Analytical Thinking

Communication Skills

Project Management

Tools

ERP Systems

Audit Management Tools

Microsoft Office

Collaboration Platforms

Oracle

SAP

Job description

• Implement a comprehensive Information Technology internal auditing program throughout Paramount
• Define audit scope to identify control deficiencies, security weaknesses, operational improvement opportunities, and best practices
• Lead and supervise a team of audit professionals
• Assess technology, operational, and compliance risks across applications, infrastructure, cybersecurity, cloud environments, and strategic technology initiatives
• Conduct audit planning and risk assessments to establish scope, resource allocation, and priorities
• Lead audits covering applications and infrastructure, security, third-party management, identity and access management, change control, asset management, disaster recovery, data privacy, cybersecurity, cloud services, and emerging technologies
• Evaluate internal control design and performance and communicate findings and cost-effective recommendations to management
• Assess risks and controls for system implementations, major technology transformations, and pre- and post-implementation reviews
• Coordinate audits with IT and business management while evaluating audit staff performance
• Serve as primary audit contact for assigned business and technology functions
• Perform business process reviews, due diligence activities, investigations, and strategic risk assessments
• Review staff work for documentation quality and support for audit conclusions
• Support periodic risk assessments and annual audit plan development
• Draft, edit, and review audit reports, executive summaries, special project reports, and administrative communications
• Coach and mentor IT Audit Managers and Staff
• Monitor emerging risks and trends in cybersecurity, cloud computing, artificial intelligence, media technology, privacy regulations, and technology governance
• Partner with stakeholders on continuous improvement and risk management initiatives
• Some domestic travel may be required

Requirements

• Minimum of 10+ years of progressive audit experience, including 2+ years of leadership experience in IT audit/accounting
• Experience within a top public accounting company, consulting organization, or internal audit function of a large public company preferred
• Prior IT consulting, cybersecurity, technology risk, or technical operational experience is a plus
• BS or MS in Information Systems, Accounting, Information Systems Auditing, Computer Science, or a related field required
• Ability to work successfully with senior business and technology leaders and establish credibility across all levels of the organization
• Demonstrated team management capabilities
• Strong project management skills
• Ability to understand operational and technology environments, business objectives, key processes, and associated risks
• Advanced knowledge of IT governance, cybersecurity, cloud security controls, infrastructure operations, application development and support, data privacy, and technology risk management
• Experience applying IT and information security frameworks such as NIST, SOX, and COBIT
• Strong comprehension of system development and implementation lifecycle methodologies and related controls
• Experience auditing automated environments, enterprise applications, cloud technologies, and complex global security and compliance functions
• Ability to influence stakeholders, build consensus, and drive outcomes in a matrixed organization
• Proficiency with ERP systems, audit management tools, Microsoft Office applications, and collaboration platforms
• Strong analytical, problem-solving, and critical-thinking capabilities
• Excellent written and verbal communication skills, including executive-audience messaging
• Sound judgment, curiosity, and strategic and creative thinking
• Professional certification such as CISA, CISSP, CIA, or CPA preferred
• Experience with Oracle and/or SAP environments preferred

Core Competencies

Demonstrates extensive experience in IT auditing, risk assessment, and compliance management, with a strong focus on cybersecurity, cloud security controls, and IT governance. Proven ability to lead audit teams, communicate findings effectively, and influence stakeholders across various organizational levels.

Highest-signal resume keywords

• IT Audit Leadership
• Cybersecurity Risk Management
• IT Governance Frameworks
• Audit Planning and Risk Assessment
• Stakeholder Engagement

Hard Skills

• IT Auditing
• Risk Assessment
• Cybersecurity
• Cloud Security Controls
• Data Privacy
• IT Governance
• Audit Management
• System Development Lifecycle
• Compliance Auditing
• Operational Improvement

Soft Skills

• Team Management
• Analytical Thinking
• Problem-Solving
• Communication Skills
• Strategic Thinking

Certifications & Qualifications

• CISA
• CISSP
• CIA
• CPA

Industry Keywords

• NIST
• SOX
• COBIT
• Cloud Technologies
• Automated Environments
• Third-Party Management
• Identity and Access Management
• Disaster Recovery
• Emerging Technologies
• Technology Risk Management

Tools & Technologies

• ERP Systems
• Audit Management Tools
• Microsoft Office
• Collaboration Platforms
• Oracle
• SAP