IT Audit Manager

Selby Jennings; Houston (TX); On-site; USD 120,000 - 170,000; Full time

Job summary

Selby Jennings represents a leading global asset management firm seeking an IT Audit Manager to join its Internal Audit organization in Houston. You will evaluate critical technology, cybersecurity, and data-related risks while partnering with business and technology leaders across a global platform.

The role targets an experienced IT Auditor who can assess emerging technology risks, conduct risk-based audits, and serve as a trusted advisor.

Qualifications

• Experience in Internal Audit, IT Risk, or Technology Controls.
• Proven ability to lead risk-based audits in a formal IA function.
• Strong understanding of technology risk management and control frameworks.

Responsibilities

• Lead end-to-end technology audit engagements covering cybersecurity, cloud, and data management.
• Perform risk assessments to identify exposure and develop audit coverage plans.
• Develop audit scopes, testing strategies, and risk-based programs for complex tech environments.
• Evaluate technology controls and strengthen governance, security, and resilience.
• Conduct walkthroughs and testing with technology, security, operations, and business stakeholders.
• Assess risks in cloud platforms, APIs, and SDLC; communicate findings to stakeholders.
• Draft concise audit observations and monitor remediation effectiveness.
• Contribute to audit methodologies and analytics-driven risk insights.

Skills

IT Audit

Risk assessment

Stakeholder management

Data analytics

Cloud risk

Education

CISA/CISSP/CRISC/CIA or equivalent certification

Tools

Power BI

Tableau

Alteryx

ACL

IDEA

Job description

A leading global asset management firm is seeking an IT Audit Manager to join its Internal Audit organization. This position offers the opportunity to evaluate some of the firm's most critical technology, cybersecurity, and data-related risks while partnering with business and technology leaders across a global platform.

This role is ideal for an experienced IT Auditor who enjoys assessing emerging technology risks, conducting complex risk-based audits, and serving as a trusted advisor to stakeholders. The position provides broad exposure across cloud technology, cybersecurity, application environments, software development practices, data governance, and enterprise technology initiatives.

Unlike heavily compliance-driven audit positions, this role emphasizes critical thinking, risk assessment, and delivering meaningful insights to the business rather than just checking the box.

Key Responsibilities

• Lead and execute end-to-end technology audit engagements covering cybersecurity, cloud computing, infrastructure, data management, technology governance, software development, and related risk areas.
• Perform risk assessments to identify key areas of exposure and help develop audit coverage plans.
• Develop audit scopes, testing strategies, and risk-based audit programs tailored to complex technology environments.
• Evaluate the effectiveness of technology controls and identify opportunities to strengthen governance, security, and operational resilience.
• Conduct walkthroughs, interviews, and testing procedures with technology, security, operations, and business stakeholders.
• Assess risks associated with modern technologies including cloud platforms, AI-enabled solutions, APIs, digital transformation initiatives, and third-party technology providers.
• Draft clear, concise audit observations and communicate findings to management and senior stakeholders.
• Monitor remediation efforts and validate the effectiveness of corrective actions.
• Contribute to the continuous enhancement of audit methodologies, reporting practices, and risk assessment processes.
• Utilize data analytics and technology-enabled audit techniques to improve audit effectiveness and identify emerging risks.

Desired Background

• 5+ years of experience within Internal Audit, Technology Audit, IT Risk, or Technology Controls environments.
• Experience executing risk-based audits within a formal Internal Audit function (3rd Line of Defense preferred).
• Strong understanding of technology risk management and control frameworks.
• Hands-on experience auditing one or more of the following:
  • Cybersecurity programs
  • Cloud platforms (AWS, Azure, GCP)
  • Application security
  • APIs and integrations
  • Infrastructure and network environments
  • Change management processes
  • Data governance and data controls
  • Software development lifecycle (SDLC)
• Ability to independently manage audit engagements from planning through reporting.
• Experience performing risk assessments, developing audit programs, documenting findings, and validating remediation activities.
• Strong communication and stakeholder management skills.
• Ability to challenge stakeholders constructively and influence control enhancements.

Preferred Qualifications

• CISA, CISSP, CRISC, CIA, or similar professional certification.
• Experience within Asset Management, Financial Services, Insurance, Consulting, or Corporate Internal Audit environments.
• Exposure to cloud security concepts, cyber risk frameworks, or emerging technologies.
• Experience leveraging analytics tools such as Power BI, Tableau, Alteryx, ACL, IDEA, or similar platforms.
• Familiarity with AI governance, digital transformation programs, and evolving technology risk trends.