IT Internal Audit Lead: Risk & Controls

BDO USA; Grand Rapids (MI); On-site; USD 110,000 - 160,000; Full time

Benefits offered by this job

ESOP ownership

Job summary

BDO USA’s IT Internal Audit Manager collaborates with the Internal Audit Director and leads planning, execution, and delivery of IT risk engagements, focusing on controls, cybersecurity, and regulatory compliance.

This role supervises staff, manages engagement economics, supports business development, and partners with leaders to strengthen governance and risk management across the firm.

Qualifications

• Bachelor’s degree in Accounting, Information Systems, or Finance is required; CPA/CISA preferred.
• 6+ years IT internal audit experience in risk advisory or similar.
• Experience testing IT general controls, application controls, automated controls, and cybersecurity risks.
• Supervisory experience is required; prior public accounting exposure preferred.
• CISA, CIA, or CPA certifications are required.

Responsibilities

• Leads IT internal audit engagements from planning through reporting and follow-up.
• Evaluates IT general and application controls, cybersecurity, data governance, and key process controls.
• Identifies control gaps and recommends practical remediation.
• Interviews, walks through processes, and maintains relationships with leadership and auditees.
• Prepares clear reports and deliverables for management and audit committees.
• Manages engagement scope, timelines, and staffing; ensures quality work product.
• Coaches and develops staff; promotes ethics and professional standards.

Skills

Strong verbal and written comms

Analytical and diagnostic skills

Project leadership

Supervisory experience

Multi-task under deadlines

Education

Bachelor’s degree in Accounting, IS, or Finance

CISA

CIA

CPA

6+ years IT internal audit experience

Tools

Microsoft Office Suite

Oracle

Job description

BDO USA’s IT Internal Audit Manager collaborates with the Internal Audit Director and leads planning, execution, and delivery of IT risk engagements, focusing on controls, cybersecurity, and regulatory compliance.

This role supervises staff, manages engagement economics, supports business development, and partners with leaders to strengthen governance and risk management across the firm.