IT Audit Manager: ITGCs, SOX & Cyber Risk Lead

3M HEALTHCARE; Grand Rapids (MI); On-site; USD 110,000 - 140,000; Full time

Benefits offered by this job

Medical, dental, vision insurance

Paid time off

401(k) plan with match

Wellness resources

Job summary

Acrisure is seeking an IT Internal Audit Manager to join our Internal Audit team in Grand Rapids, MI. The role reports to the IT Internal Audit Director and works within a global team to provide assurance over internal controls.

The role focuses on planning and executing risk-based IT audits, evaluating ITGCs and application controls, and supporting SOX testing with cross-functional collaboration. Occasional travel (<20%) may be required.

Qualifications

• 6+ years of IT audit, IT risk, or information security experience.
• Professional certs preferred: CISA, CISSP, CRISC, CISM, CPA, or CIA.

Responsibilities

• Plan and execute risk‑based IT audits across infrastructure, applications, cloud, cyber security, and third‑party risks.
• Manage multiple audits with competing deliverables and tight timelines.
• Evaluate ITGCs and application controls aligned with SOX, GDPR, NIST, ISO27001, and other standards.
• Assist in SOX testing during peak season with time‑sensitive deliverables.
• Partner with business and tech teams to define audit scopes and perform testing procedures.
• Support integrated audits and cross‑functional projects with other audit team members.
• Deliver reports with actionable recommendations to senior management and stakeholders across regions.

Skills

IT audit

Project management

Risk assessment

Communication

Cloud security

Education

Bachelor’s degree in Computer Science/MIS/Accounting/related field

Tools

PowerBI

Microsoft 365

ERP (Workday)

ERP (Oracle)

Job description

Acrisure is seeking an IT Internal Audit Manager to join our Internal Audit team in Grand Rapids, MI. The role reports to the IT Internal Audit Director and works within a global team to provide assurance over internal controls.

The role focuses on planning and executing risk-based IT audits, evaluating ITGCs and application controls, and supporting SOX testing with cross-functional collaboration. Occasional travel (<20%) may be required.