IT Audit Manager

Koitecc Solutions; Charlotte, Northern (NC, KY); Hybrid; USD 113,000 - 164,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

Parental leave

Paid time off

401(k) plan

Life insurance

Disability insurance

Stock purchase plan

Tuition reimbursement

Job summary

Moody's is seeking an experienced IT and risk audit professional to lead risk-based IT and integrated audits across the organization. You will test controls in cloud, IAM, data governance, and AI governance, partnering with technology and product teams while coaching others.

The role requires 5+ years in audit/risk, deep knowledge of COSO/COBIT/ISO/NIST, and strong data analytics skills with Excel/Power BI/Tableau. US-based salary range is provided and benefits are included.

Qualifications

• Minimum 5 years of experience in a Big 4 accounting firm or global org in audit, risk, or controls.
• Strong knowledge of risk and controls across technologies and IT infra, including cloud (AWS/Azure/GCP), IAM, and cybersecurity.
• Deep knowledge of internal control frameworks (COSO, COBIT, ISO, NIST) and SOX requirements.
• Experience in assurance over software development, SaaS, secure coding, cloud and data processes; fintech or tech sector valued.
• Proficient with data analytics tools (Excel, Power BI, Tableau) to enhance audit testing and monitoring.
• Excellent communication, leadership, and project management skills; English fluency.

Responsibilities

• Lead and execute risk-based IT and integrated audits across the organization.
• Develop understanding of tech environment and IT risks for scoping and testing.
• Test design and operating effectiveness across IT domains including cloud, IAM, and data governance.
• Manage end-to-end audit lifecycle per IIA standards.
• Translate findings into actionable risk insights and recommendations.
• Collaborate with Technology, Data, and Product teams and drive remediation.
• Validate remediation and monitor closure; review evidence and ensure sustainability.
• Coach junior team members and ensure delivery quality and cycle time.

Skills

Big 4 experience

IT risk

Cloud environments

Identity and access management

SOX compliance

Data analytics

Excel

Power BI

Tableau

AI tools

Communication

Team management

Auditing

Education

Bachelor's degree or higher

CISA

CISSP

CRISC

Tools

AWS

Azure

GCP

Excel

Power BI

Job description

At Moody's, we unite the brightest minds to turn today's risks into tomorrow's opportunities. We do this by striving to create an inclusive environment where everyone feels welcome to be who they are-with the freedom to exchange ideas, think innovatively, and listen to each other and customers in meaningful ways. Moody's is transforming how the world sees risk. As a global leader in ratings and integrated risk assessment, we're advancing AI to move from insight to action-enabling intelligence that not only understands complexity but responds to it. We decode risk to unlock opportunity, helping our clients navigate uncertainty with clarity, speed, and confidence.

Skills and Competencies

• Minimum 5 years of experience in a Big 4 accounting firm and/or a global organization within an audit, risk, or controls role
• Strong technical knowledge and understanding of risk and controls across a variety of technologies and IT infrastructure platforms, including cloud environments (AWS, Azure, GCP), identity and access management, infrastructure and endpoint controls, and cybersecurity domains
• Deep knowledge and experience in internal control frameworks and risk standards (COSO, COBIT, ISO, NIST), Sarbanes-Oxley requirements, and financial systems and related technology
• Experience performing assurance work over software development, SaaS solutions, secure coding, and cloud and data processes; working knowledge through compliance, risk management, or consulting roles within the fintech or technology sector is also valued
• Demonstrated ability to apply data analytics tools such as Excel, Power BI, and Tableau to enhance audit testing, identify trends, and build continuous monitoring capabilities
• Innovative, results-oriented, and able to demonstrate strong communication, interpersonal, persuasion, leadership, team management, project management, and critical thinking skills
• Proficiency in the Microsoft Office suite; fluency in written and spoken English required; ability to work both independently and as a member of a team in a fast-paced environment while managing multiple priorities
• Demonstrated proficiency in artificial intelligence concepts, with hands-on experience using AI tools to streamline workflows and enhance operational efficiency. Proven ability to implement AI-powered solutions to solve business challenges. Demonstrates a growing awareness of AI risk management and a commitment to responsible and ethical AI use.

Education

• Bachelor's degree or higher, preferably in computer science, computer engineering, information technology, information systems, or a related field
• CISA, CISSP, or CRISC certification (or equivalent professional qualification) required

Responsibilities

Lead and execute risk-based IT and integrated audits across the organization, managing the full audit lifecycle while partnering with senior stakeholders and coaching team members.

• Plan and execute risk-based IT and integrated audits, performing hands-on testing on complex and high-risk areas while directing the overall engagement
• Develop and maintain a deep understanding of the technology environment, key business processes, and associated IT risks and controls across business segments, applying this knowledge during scoping, walkthroughs, and testing
• Perform and oversee testing of design and operating effectiveness across IT and technology risk domains, including cloud environments, identity and access management, infrastructure controls, vulnerability and patch management, IT change management, data governance, and AI/ML and generative AI governance
• Manage the end-to-end audit lifecycle - including scoping, timelines, information gathering, documentation, and reporting - ensuring all work is performed in accordance with departmental and Institute of Internal Auditors standards
• Translate technical and control-level findings into clear, business-relevant risk insights; draft observations, impact statements, and practical recommendations, and coach team members to do the same
• Partner and communicate effectively with Technology, Data, and Product teams while maintaining independence throughout the audit lifecycle and driving meaningful, risk-based remediation
• Validate remediation of audit findings and track timely issue closure, including evaluating action plans, independently reviewing and retesting evidence, and confirming sustainable control improvements
• Coach and develop junior team members through the audit lifecycle, including communicating roles and expectations, reviewing workpapers, providing feedback, and reinforcing accountability for deliverables, hours, and cycle time

About the Team

The Moody's Internal Audit team is dedicated to providing independent, objective assurance and advisory services designed to add value and improve the Company's operations and the effectiveness of its control, risk management, and compliance processes. By joining our team, you will be part of a highly collaborative and intellectually rigorous environment that leverages emerging technologies, data analytics, and AI-driven capabilities to advance audit quality across the enterprise. Our team works closely with senior leaders and key stakeholders globally to deliver meaningful insights and drive sustainable improvements across Moody's operations worldwide.

Compensation and Benefits

For US-based roles only: the anticipated hiring base salary range for this position is $113,200.00 - $164,050.00, depending on factors such as experience, education, level, skills, and location. This range is based on a full-time position. In addition to base salary, this role is eligible for incentive compensation.

Moody's also offers a competitive benefits package, including not but limited to:

• medical
• dental
• vision
• parental leave
• paid time off
• 401(k) plan with employee and company contribution opportunities
• life
• disability
• accident insurance
• discounted employee stock purchase plan
• tuition reimbursement

Moody's is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, sex, gender, age, religion or creed, national origin, ancestry, citizenship, marital or familial status, sexual orientation, gender identity, gender expression, genetic information, physical or mental disability, military or veteran status, or any other characteristic protected by law. Moody's also provides reasonable accommodation to qualified individuals with disabilities or based on a sincerely held religious belief in accordance with applicable laws. If you need to inquire about a reasonable accommodation, or need assistance with completing the application process, please email [e-mail]. This contact information is for accommodation requests only, and cannot be used to inquire about the status of applications

For San Francisco positions, qualified applicants with criminal histories will be considered for employment consistent with the requirements of the San Francisco Fair Chance Ordinance.

This position may be considered a promotional opportunity, pursuant to the Colorado Equal Pay for Equal Work Act.

Click here to view our full EEO policy statement. Click here for more information on your EEO rights under the law. Click here to view our Pay Transparency Nondiscrimination statement.

Candidates for Moody's Corporation may be asked to disclose securities holdings pursuant to Moody's Policy for Securities Trading and the requirements of the position. Employment is contingent upon compliance with the Policy, including remediation of positions in those holdings as necessary.