IT Audit Manager

Eliassen Group; King of Prussia (PA); On-site; USD 125,000 - 135,000; Full time

Job summary

Eliassen Group is seeking an experienced IT Audit Manager to lead technology-focused internal audits in a highly regulated environment. The role covers IT controls, SOX ITGC testing, and cybersecurity risk, with responsibility for remediation and reporting to senior management.

The position emphasizes leadership of audit engagements, collaboration with IT and process owners, and the development of practical controls and continuous improvement initiatives.

Qualifications

• Bachelor’s degree in a related field.
• 7+ years of IT audit, risk, or IT compliance experience.
• Experience leading IT audit engagements.
• Strong hands-on SOX ITGC testing experience.
• Experience evaluating access management, change management, IT operations.
• Familiarity with COSO, COBIT, and NIST frameworks.
• Excellent written and verbal communication skills.
• Ability to manage multiple priorities across teams.

Responsibilities

• Lead risk-based IT audit engagements from planning through remediation.
• Develop audit programs for IT processes, apps, infrastructure, and security controls.
• Assess ITGCs and ITACs design and operating effectiveness.
• Evaluate controls: access management, change management, IT operations, system development, governance.
• Coordinate with IT, process owners, compliance, and external auditors for SOX.
• Lead and execute SOX ITGC testing supporting financial reporting.
• Drive technology risk assessments across apps, infra, cybersecurity, and resilience.
• Provide leadership, coaching, and guidance to audit staff.
• Present findings to management and track remediation progress.

Skills

IT Audit

SOX ITGC

Cybersecurity controls

Risk assessment

Leadership

Education

Bachelor's degree in Accounting/IS/IT/CS/Finance

Tools

SAP

Oracle

GRC platforms

Job description

Description:

We are seeking an experienced IT Audit Manager to lead technology-focused internal audit activities for a large organization operating in a highly regulated environment.

This position will be responsible for assessing technology risks, evaluating the design and operating effectiveness of internal controls, leading IT audit engagements, and supporting SOX compliance initiatives.

The ideal candidate will bring a strong combination of hands‑on IT audit experience, SOX ITGC expertise, technology risk management, cybersecurity controls, and audit leadership. This individual should be comfortable evaluating complex technology environments, identifying control deficiencies, developing practical remediation recommendations, and communicating findings to senior management and key stakeholders.

Salary: $125,000 - $135,000 base salary

Responsibilities:

IT Audit & Controls

• Lead risk-based IT audit engagements from planning and scoping through testing, reporting, and remediation follow-up
• Develop audit programs and testing approaches for IT processes, applications, infrastructure, and security controls
• Assess the design and operating effectiveness of IT General Controls (ITGCs) and IT Application Controls (ITACs)
• Evaluate controls related to:
  • Logical access and identity management
  • Change management
  • IT operations
  • System development
  • Technology governance

SOX Compliance

• Review audit documentation, testing results, and workpapers for quality, accuracy, and completeness
• Identify control deficiencies, assess associated risks, and recommend corrective actions
• Lead and execute SOX ITGC testing supporting financial reporting requirements
• Evaluate access management, change management, IT operations, automated controls, system-generated reports, and interfaces
• Partner with IT, business process owners, compliance teams, and external auditors to support SOX requirements
• Evaluate technology controls across enterprise applications, infrastructure, and supporting systems
• Support control deficiency assessments, remediation planning, and follow-up testing
• Identify opportunities to improve SOX processes, testing efficiency, documentation, and control effectiveness

Technology Risk & Cybersecurity

• Conduct technology risk assessments across applications, infrastructure, cybersecurity, and operational resilience
• Evaluate cloud environments, security configurations, identity and access management, and vulnerability management practices
• Review controls against established frameworks including NIST, COBIT, and COSO
• Assess IT governance, SDLC, technology implementations, and change management processes
• Evaluate business continuity, disaster recovery, data protection, and incident response controls
• Assess third‑party technology risks, vendor controls, and SOC reports

Leadership & Stakeholder Management

• Manage multiple IT audit engagements while maintaining timelines, quality standards, and priorities
• Provide leadership, coaching, and technical guidance to audit team members
• Partner with IT leadership, business stakeholders, risk, compliance, and other functions to identify and address technology risks
• Prepare clear audit reports outlining findings, risk exposure, root causes, and recommended corrective actions
• Present findings and recommendations to management and senior leadership
• Track outstanding audit findings and monitor remediation activities
• Identify opportunities to improve audit methodologies through automation, data analytics, and continuous improvement

Experience Requirements:

• Bachelor's degree in Accounting, Information Systems, Information Technology, Computer Science, Finance, or a related field
• 7+ years of progressive experience in IT audit, technology risk, internal audit, or IT compliance
• Experience leading IT audit engagements and overseeing audit testing
• Strong hands‑on experience with SOX ITGC testing
• Experience evaluating controls related to access management, change management, and IT operations
• Experience evaluating IT Application Controls and automated controls
• Knowledge of technology risk management, cybersecurity controls, and regulatory compliance
• Experience conducting technology risk assessments and identifying control deficiencies
• Experience supporting control remediation activities
• Familiarity with internal audit and risk frameworks including COSO, COBIT, and NIST
• Strong written and verbal communication skills with experience presenting audit findings to management
• Ability to manage multiple priorities and work effectively across technical and nontechnical teams

Preferred Qualifications

• Professional certification such as CISA, CIA, CPA, or CISSP
• Public accounting, Big 4, consulting, or corporate internal audit experience
• Experience within utilities, energy, financial services, or another highly regulated industry
• Experience auditing enterprise platforms such as SAP or Oracle
• Knowledge of cloud environments including AWS, Microsoft Azure, or Google Cloud
• Experience evaluating cybersecurity programs, IT infrastructure, or major technology transformations
• Exposure to Operational Technology (OT), Industrial Control Systems (ICS), or SCADA
• Experience with audit management systems, GRC platforms, automation, or data analytics

Education Requirements:

• Bachelor's degree required.