Executive IT Audit Leader: Cybersecurity & Risk

First American; Santa Ana (CA); On-site; USD 129,000 - 172,000; Full time

Benefits offered by this job

Medical, dental, vision benefits

401k plan

PTO and paid leave

Employee stock purchase plan

Job summary

First American seeks an experienced IT/audit leader to guide complex cybersecurity and technology audits. You will work with CTO, CISO, CRO, and executives to define scope, assess risks, and ensure evidence-based findings.

The role focuses on coordinating audits across security domains, with emphasis on controls and governance. The position requires deep experience leading teams, strong written and verbal communication, and the ability to present results to senior leadership and regulatory

Qualifications

• 8+ years leading complex IT or cybersecurity audits with senior client interaction.
• Experience in operational cybersecurity or data-risk audits is required.
• Strong leadership and ability to guide executives through findings.

Responsibilities

• Lead executive-level discussions with technology, security, risk, finance, and business leaders.
• Set audit objectives, scope, criteria, resources, and timing for audits.
• Direct audits across technology and cybersecurity programs identified in this profile.
• Oversee audit plans, evidence, and reporting for quality and consistency.
• Present plans, results, and risks to Internal Audit leadership and regulators.

Skills

Audit leadership

Executive communication

Risk assessment

Cybersecurity audits

Team management

Education

CISA or equivalent

Tools

AuditBoard

Power BI

ServiceNow

Jira

SailPoint

Job description

First American seeks an experienced IT/audit leader to guide complex cybersecurity and technology audits. You will work with CTO, CISO, CRO, and executives to define scope, assess risks, and ensure evidence-based findings.

The role focuses on coordinating audits across security domains, with emphasis on controls and governance. The position requires deep experience leading teams, strong written and verbal communication, and the ability to present results to senior leadership and regulatory