IT Audit Manager: AI-Driven Risk & Cloud Controls

Moody's Investors Service; New York, Northern (NY, KY); Hybrid; USD 113,000 - 164,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

Parental leave

Paid time off

401(k) plan with company match

Life insurance

Disability insurance

Employee stock purchase plan

Tuition reimbursement

Job summary

Moody's Investors Service, based in New York, seeks an experienced IT risk and controls professional to lead risk-based IT and integrated audits across the organization. You will manage the full audit lifecycle, test complex IT environments, and translate findings into actionable risk insights.

Responsibilities include coordinating with Tech/Data/Product teams, coaching junior staff, and validating remediation to ensure sustainable controls; strong communication is essential.

Qualifications

• Bachelor's degree in CS/IT or related field.
• CISA, CISSP, or CRISC certification required.
• 5+ years in audit, risk, or controls in IT environments.

Responsibilities

• Lead and execute risk-based IT and integrated audits across the organization.
• Plan and execute risk-based IT audits with hands-on testing.
• Develop understanding of technology environment and IT risks across segments.
• Perform testing of design and operating effectiveness across IT domains.
• Manage end-to-end audit lifecycle and reporting per standards.
• Draft observations and recommendations; coach team members.
• Coordinate with Technology, Data, and Product teams; drive remediation.
• Validate remediation and ensure sustainable controls.
• Coach juniors through the audit lifecycle.

Skills

Audit experience (Big 4/Global)

IT risk & controls

COSO/COBIT/ISO/NIST

SOX & financial controls

Data analytics (Excel/Power BI/Tableau

Communication & leadership

English fluency

AI risk management awareness

Education

Bachelor's degree or higher in CS/IT or related field

CISA/CISSP/CRISC certification

Tools

Power BI

Tableau

Excel

Job description

Moody's Investors Service, based in New York, seeks an experienced IT risk and controls professional to lead risk-based IT and integrated audits across the organization. You will manage the full audit lifecycle, test complex IT environments, and translate findings into actionable risk insights.

Responsibilities include coordinating with Tech/Data/Product teams, coaching junior staff, and validating remediation to ensure sustainable controls; strong communication is essential.