IT Audit Manager, Corporate Technology & Cybersecurity

First American Title Insurance Co; Santa Ana (CA); Hybrid; USD 129,000 - 172,000; Full time

Benefits offered by this job

Medical

Dental

Vision

401k

PTO/paid sick leave

Employee stock purchase plan

Job summary

First American Title Insurance Co. is hiring an IT Audit Manager for a hybrid role in Santa Ana, CA. You will lead risk-based technology and cybersecurity audits from planning to reporting, partnering with senior stakeholders and supporting executive and regulatory readiness.

Required qualifications include at least 8 years of IT/cybersecurity audit leadership and CISA or equivalent, with familiarity across IAM, cloud security, and data protection. Salary range is USD 129,300 - 172,300 per year.

Qualifications

• Lead IT/cybersecurity audits and advise on technology risks.
• Experience coordinating with senior executives and regulatory bodies.
• Hands-on with security configurations, IAM, cloud security, and data protection.
• CISA or equivalent certification strongly preferred.

Responsibilities

• Lead complex audits from planning through reporting with independence.
• Define audit objectives, scope, and resources; guide the audit team.
• Present findings to Internal Audit leadership and executives.
• Coordinate with assurance teams and external auditors as needed.

Skills

Audit leadership

Executive stakeholder management

Risk-based auditing

Technology risk assessment

Education

CISA or equivalent

Tools

AuditBoard

Power BI

ServiceNow

Jira

SailPoint

CyberArk

Active Directory

AWS

Azure

Google Cloud Platform

SIEM

WAF

Job description

First American Title Insurance Co is hiring an IT Audit Manager, Corporate Technology & Cybersecurity for a hybrid role in Santa Ana, CA. This position leads complex, risk-based technology and cybersecurity audits from annual planning through reporting, partnering with senior stakeholders and supporting executive and regulatory readiness. Salary range is USD 129,300 - 172,300 per year.

What you'll do

Lead executive-level discussions and guide audit strategy across the technology and cybersecurity programs identified in the audit profile. You will translate risk into clear audit objectives, influence scoping decisions, and ensure audit coverage is complete and defensible across the audit universe, enterprise architecture, regulations, prior findings, emerging technology, and key dependencies.

• Set expectations with technology, security, risk, finance, and business leaders, including the CTO, CISO, CRO, and their direct reports.
• Define audit objectives, risk assessment, scope, criteria, resources, and timing.
• Challenge scope against the audit universe, enterprise architecture, regulations, prior findings, emerging technology, and dependencies to supportable exclusions.
• Apply deep technical audit judgment or bring in subject-matter expertise when specialized areas require it.
• Ensure security-asset audit scopes include baselines and rules or settings, privileged access, logging or monitoring, encryption, certificate lifecycle, changes, and exceptions.
• Direct and challenge configuration-focused coverage across specialties such as identity and privileged access, network security and segmentation, cloud security architecture and WAF, Security Operations monitoring and response, vulnerability management, and data-protection controls (DLP, encryption, and key management).

How you'll deliver

• Oversee the Lead and audit team by reviewing plans, walkthroughs, sampling, procedures, evidence, workpapers, issue evaluations, and reporting for quality and support.
• Own engagement decisions, including issue severity, root cause, action plans, and reports.
• Escalate promptly and resolve differences while preserving audit independence.
• Present engagement plans, status, results, and significant risks to Internal Audit leadership, executives, regulators, and examiners, keeping examination materials complete and supportable.
• Coordinate with assurance teams and external auditors on reliance while protecting Internal Audit scope and conclusions.
• Coach auditors, build technical capability, manage concurrent project resources and deadlines, and improve audit methods, continuous auditing, and analytics.

Required qualifications

• At least 8 years of relevant experience, including leading complex IT or cybersecurity audits and advising on technology risks and controls.
• Experience leading operational cybersecurity or data-risk audits.
• Demonstrated experience managing teams and engaging senior client leadership.
• Extensive IT or cybersecurity audit leadership in one or more domains, such as CTI/threat hunting, Security Operations/incident response, endpoint/network security, data security/protection/privacy, insider risk/digital forensics, Offensive Security/penetration testing/application security, vulnerability/patch management, identity and access management, or cloud security/service management (AWS, Microsoft Azure, Google Cloud Platform), PKI/certificate management, and network/technology.
• Hands-on experience auditing security configurations involving firewalls, SIEM, cloud security, WAF, encryption, or certificates.
• Primary leadership depth in at least one complementary area: (1) IAM/PAM and identity architecture (including CyberArk and Active Directory) or network security (firewalls and segmentation) or cloud security architecture and WAF; or (2) Security Operations (monitoring and incident response) or vulnerability management; or (3) Data Protection (DLP, encryption, key management, and data controls).
• Ability to assess scope completeness and direct related work.
• Familiarity with official security guidance for Microsoft Azure, AWS, and Google Cloud, including Azure network security best practices, the AWS Well-Architected Security Pillar, and Google Cloud Well-Architected security guidance.
• Advanced understanding of risk assessment, internal control design and operating effectiveness, audit evidence, sampling, issue development, and accepted internal audit standards.
• Strong executive presence with negotiation, writing, presentation, and relationship-building skills, plus sound judgment in sensitive or high-pressure discussions.

Helpful experience

• CISA or equivalent (CISM, CISSP, CRISC, CIPP/US) strongly preferred.
• Banking IT audit and regulatory examination experience preferred.
• Relevant IT or cybersecurity coursework, professional training, or hands-on experience valued.
• Familiarity with AuditBoard, Power BI, ServiceNow, Jira, or SailPoint helpful.

Tools and technologies you may work with

• CyberArk, Active Directory, AWS, Microsoft Azure, Google Cloud Platform, SIEM, WAF
• Azure network security best practices, AWS Well-Architected Security Pillar, Google Cloud Well-Architected security guidance
• DLP, PKI, Power BI, ServiceNow, Jira, SailPoint, AuditBoard

Benefits

• Comprehensive benefits package including medical
• Comprehensive benefits package including dental
• Comprehensive benefits package including vision
• 401k
• PTO/paid sick leave
• Employee stock purchase plan

Equal opportunity and criminal history review (Los Angeles County residents)

For candidates who will be working from an unincorporated area within Los Angeles County: First American will consider for employment all qualified applicants, including those with arrest or conviction records, in a manner consistent with applicable state and local laws (e.g., the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act). First American intends to conduct a review of an applicant’s criminal history in connection with a conditional offer. First American reasonably believes that a criminal history may have a direct, adverse and negative relationship with job duties potentially resulting in withdrawal of the conditional offer, including handling confidential, proprietary, or trade secret information, administrating or facilitating financial transactions, and the ability to meet customer-imposed criminal history requirements.