IT Audit Manager

KBR, Inc.; Washington; On-site; USD 130,000 - 170,000; Full time

Benefits offered by this job

401K plan with company match

Medical, dental, vision

Life insurance

Flexible work schedule

Career development

Job summary

KBR, Inc. is seeking an IT Audit Manager to lead the IT SOX program and oversee testing of ITGCs, SDLC controls, and automated controls. You will partner with IT leadership, business process owners, and external auditors to ensure timely remediation and ongoing SOX 404 compliance.

The role requires extensive IT audit experience in global organizations, strong control frameworks knowledge, and proven leadership of audit teams across onshore and offshore resources.

Qualifications

• Bachelor’s degree in a related field.
• Minimum 10 years in IT audit, IT risk management, IT controls, IT compliance, or related disciplines.
• Minimum 4 years leading IT SOX programs and audit teams.
• Experience with SOX 404 testing in large, global organizations.
• Experience coordinating with IT, Controls, Finance, and external auditors.

Responsibilities

• Manage annual IT SOX compliance program across IT control domains.
• Develop risk-based testing strategies for ITGCs, application controls, automated controls, interfaces, and SDLC controls.
• Oversee walkthroughs, control assessments, and testing of key IT controls.
• Lead testing of ITGCs including access, change, IT operations, and SDLC controls.
• Direct testing of SDLC controls and production migration processes.
• Oversee testing of automated controls, interfaces, and management reports for financial reporting.
• Mentor onshore and offshore IT audit teams and ensure quality and consistency.
• Review workpapers, documentation, and audit evidence for accuracy and completeness.
• Coordinate with IT and external auditors to address control issues and facilitate reliance.
• Evaluate deficiencies and remediation effectiveness; track resolution to completion.
• Prepare status reports and risk updates for management and stakeholders.

Skills

ITGC testing

SOX 404

SDLC controls

Leadership

Stakeholder management

Analytical thinking

Communication

Risk assessment

Education

Bachelor’s degree in Information Systems/IT/CS/Accounting/Finance/Audit

Job description

Title:

IT Audit Manager

KBR is seeking an experienced IT Audit Manager to join the Internal Audit & Advisory team. This role is responsible for leading and overseeing the organization’s IT Sarbanes-Oxley (SOX) compliance program, including the planning, execution, and reporting of IT General Controls (ITGC), application controls, automated controls, interface controls, and Software Development Lifecycle (SDLC) control testing. The IT Audit Manager will partner closely with IT leadership, business process owners, internal controls teams, and external auditors to ensure an effective control environment, timely remediation of identified deficiencies, and ongoing compliance with SOX 404 requirements.

The ideal candidate brings strong experience managing IT SOX programs within complex global organizations, demonstrated expertise in IT control frameworks and risk assessment methodologies, and a proven ability to lead and develop audit teams while driving high-quality, risk-based audit execution.

Key Responsibilities

• Manage the annual IT SOX compliance program, including planning, execution, monitoring, and reporting activities across IT control domains.
• Develop and maintain risk-based testing strategies and audit plans covering IT General Controls (ITGCs), application controls, automated controls, interface controls, and SDLC controls.
• Oversee walkthroughs, control assessments, and testing activities to evaluate the design and operating effectiveness of key IT controls.
• Lead and review testing of ITGCs, including access management, change management, IT operations, and system development controls.
• Direct testing and evaluation of SDLC controls, including development approvals, testing evidence, release management, and production migration processes.
• Oversee testing of key automated controls, application controls, system interfaces, and management reports used in financial reporting processes.
• Manage and mentor onshore and offshore IT audit and SOX testing teams, ensuring consistency, quality, and adherence to established audit methodologies.
• Review workpapers, testing documentation, and audit evidence to ensure accuracy, completeness, and compliance with professional standards.
• Partner with IT management, Internal Controls, business process owners, and external auditors to coordinate testing activities, address control issues, and facilitate audit reliance.
• Evaluate identified control deficiencies, assess potential SOX impact and severity, and provide recommendations for corrective actions.
• Monitor remediation activities, validate the effectiveness of corrective actions, and track resolution through completion.
• Prepare and present status reports, executive dashboards, testing summaries, and risk updates to management and key stakeholders.

Basic Qualifications

Education & Experience

• Bachelor’s degree in Information Systems, Information Technology, Computer Science, Accounting, Finance, Audit, or a related field.
• Minimum of 10 years of progressive experience in IT audit, IT risk management, IT controls, IT compliance, or related disciplines.
• Minimum of 4 years of experience leading and managing IT SOX compliance programs and audit teams.
• Experience conducting and overseeing SOX 404 testing within large, complex, and global organizations.
• Demonstrated experience leading cross-functional initiatives involving IT, Internal Controls, Finance, and external audit stakeholders.
• Experience managing distributed, onshore, and offshore resources in a testing or audit environment.

Technical & Leadership Skills

• Deep knowledge of IT General Controls (ITGCs), including access management, change management, IT operations, and system development controls.
• Strong expertise in SOX 404 compliance requirements, control testing methodologies, and internal control frameworks.
• Experience evaluating and testing application controls, automated controls, interface controls, and system-generated reports.
• Strong understanding of Software Development Lifecycle (SDLC) processes and associated control requirements.
• Proven ability to assess control design and operating effectiveness, identify risks, and evaluate control deficiencies.
• Strong analytical, problem-solving, and risk assessment skills.
• Ability to manage multiple priorities, projects, and deadlines in a fast-paced environment.
• Effective leadership, coaching, and team development capabilities.
• Excellent verbal and written communication skills with the ability to present complex technical and compliance matters to diverse audiences.
• Strong stakeholder management and relationship-building skills across business and technology functions.

Preferred Qualifications

• Certified Information Systems Auditor (CISA), Certified Information Systems Security Professional (CISSP), or equivalent professional certification.
• Prior experience within a publicly traded organization with mature SOX compliance requirements.
• Experience supporting external audit reliance strategies and coordinating with external auditors.
• Knowledge of leading control frameworks and governance standards, including COBIT, NIST, and related IT risk frameworks.
• Experience supporting digital transformation, ERP implementations, cloud environments, or large-scale technology change initiatives.
• Advanced experience with data analytics, audit automation, or continuous controls monitoring tools.

Additional Compensation: KBR may offer bonuses, commissions, or other forms of compensation to certain job titles or levels, per internal policy or contractual designation. Additional compensation may be in the form of sign on bonus, relocation benefits, short term incentives, long term incentives, or discretionary payments for exceptional performance.

Benefits: KBR offers a selection of competitive lifestyle benefits which could include a 401K plan with company match, medical, dental, vision, life insurance, AD&D, flexible spending account, disability, paid time off, or flexible work schedule. We support career advancement through professional training and development.

Belong, Connect and Grow at KBR

At KBR, we are passionate about our people and our Zero Harm culture. These inform all that we do and are at the heart of our commitment to, and ongoing journey toward being a People First company. That commitment is central to our team of team’s philosophy and fosters an environment where everyone can Belong, Connect and Grow. We Deliver – Together.

KBR is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, disability, sex, sexual orientation, gender identity or expression, age, national origin, veteran status, genetic information, union status and/or beliefs, or any other characteristic protected by federal, state, or local law.