IT Internal Audit Senior Manager

at Oldcastle Payroll, Inc in; Atlanta (GA); Hybrid; USD 150,000 - 210,000; Full time

Benefits offered by this job

Competitive pay

Medical benefits

Retirement plan

Wellness programs

Inclusive culture

Job summary

CRH is seeking an IT Internal Audit Senior Manager (Construction) to lead a team responsible for IT and cyber audits across complex environments. The role emphasizes risk-based engagements, stakeholder collaboration, and applying analytics to improve controls and efficiency.

You will influence technology risk governance, partner with IT, security, finance and operations, and drive audit transformation in a global organization with a hybrid work model in Atlanta.

Qualifications

• Bachelor's degree in information systems, Computer Science, Engineering, Cybersecurity, Finance/Business with IT focus, or related field.
• 10+ years of experience in IT audit, technology risk, cybersecurity or controls experience within practice, private or public sector.
• Professional certifications such as CISA, CISSP, CISM, CRISC, RE, or equivalent.

Responsibilities

• Manage and deliver assigned engagements of the annual IT audit plan, including scoping, executing and reporting on risk-based IT and cyber audits, ensuring high-quality controls.
• Direct and develop audit teams by delegating effectively, providing coaching and feedback, and fostering an engaged, high-performing culture built on trust, collaboration and continuous learning.
• Assess and improve complex IT, cyber, ERP, AI, OT and digital control environments, providing commercially focused, pragmatic recommendations that balance risk mitigation with operational efficiency.
• Drive functional projects and initiatives that support technology-enabled audit transformation, improving governance, control standards, and operational efficiency (including SOX, frameworks, and methodology).
• Build and maintain strong relationships with IT, security, finance, and operations stakeholders, acting as a trusted advisor while maintaining independence and representing IA with credibility and professionalism.
• Identify emerging technology risks and propose innovative solutions that enhance IA effectiveness, leveraging data analytics, automation, and audit technologies to improve insights and efficiency.
• Travel to CRH locations as required to oversee planning and fieldwork, conduct stakeholder discussions, and coach teams in diverse environments.

Skills

Leadership

Communication

Data analytics

Technology risk

Cybersecurity

Audit methodology

Independence

Stakeholder management

Team development

Education

Bachelor's degree in information systems/CS/engineering

CISA/CISSP/CISM/CRISC/RE or equivalent

Tools

SAP ECC

SAP S/4HANA

Alteryx

Power BI

MindBridge

Co-Pilot

Job description

IT Internal Audit Senior Manager (Construction)

CRH is a leading global diversified building materials group, employing over 75,800 people at more than 3,160 locations in 29 countries. CRH is the leading building materials company in North America and the world. We manufacture and distribute a diverse range of superior building materials, products, and solutions, which are used extensively in construction projects of all sizes.

Job Summary

As a Senior Internal Audit Manager, Technology, you will manage a team responsible for driving greater efficiencies, strengthening the technology control environment, and enhancing CRH's performance and growth through improved technology, cyber, and operational risk management. You will build and develop high performing audit teams while working with diverse companies and cultures across CRH worldwide, gaining exposure to a broad range of technology landscapes, digital initiatives, and business environments. To be effective in this role, you must be capable of assessing and improving complex IT and cyber related processes - including applications, infrastructure, security, data, and ERP environments - while demonstrating strong analytical, communication, and people leadership skills. This position offers a unique opportunity to influence how risks related to technology are managed across the Group and provides a strong platform for progression into more senior leadership roles within Internal Audit, Technology, or other business functions.

Job Location

This role is based at our Corporate office in the Perimeter area of Atlanta, GA - hybrid work schedule

Job Responsibilities

• Manage and deliver assigned engagements of the annual IT audit plan, including scoping, executing and reporting on risk-based IT and cyber audits, ensuring high-quality controls.
• Direct and develop audit teams by delegating effectively, removing obstacles, providing coaching and feedback, and fostering an engaged, high-performing culture built on trust, collaboration and continuous learning.
• Assess and improve complex IT, cyber, ERP, AI, OT and digital control environments, providing commercially focused, pragmatic recommendations that balance risk mitigation with operational efficiency.
• Drive functional projects and initiatives that support technology-enabled audit transformation, improving governance, control standards, and operational efficiency (including SOX, frameworks, and methodology).
• Build and maintain strong relationships with IT, security, finance, and operations stakeholders, acting as a trusted advisor while maintaining independence and representing IA with credibility and professionalism.
• Identify emerging technology risks and propose innovative solutions that enhance IA effectiveness, leveraging data analytics, automation, and audit technologies to improve insights and efficiency.
• Travel to CRH locations as required to oversee planning and fieldwork, conduct stakeholder discussions, and coach teams in diverse environments.

Job Requirements

• A bachelor's degree in information systems, Computer Science, Engineering, Cybersecurity, Finance/Business with IT focus, or related field.
• 10+ years of experience in IT audit, technology risk, cybersecurity or controls experience within practice, private or public sector. Including at a manager level or equivalent.
• A relevant professional certification such as CISA, CISSP, CISM, CRISC, RE, or equivalent certification.
• Experience in SOX, corporate governance, internal controls, compliance and substantive testing.
• Extensive practical (audit) experience of SAP ECC and/or SAP S/4 HANA
• Extensive practical (audit) experience of Operational Technology (OT) within Industrial Control Systems (ICS) environments incl. PLCs, OT networks, SCADA systems, etc.
• Extensive practical (audit) experience in IT infrastructure, cloud, AI, network and cyber security
• Exposure to data analytics, automation and/or AI, and the use of associated relevant tools such as Alteryx, Power BI, Mindbridge, Co-Pilot, etc.
• Relevant industry knowledge (building materials, construction, manufacturing)
• Act with integrity and objectivity, exercising professional judgement while maintaining independence in accordance with the Global Internal Audit Standards (GIAS).
• The ability to apply strong audit methodology and assurance practices, including risk assessment, scoping, process walkthroughs, control design evaluation, control testing, and data-driven auditing.
• The ability to influence and communicate effectively, translating complex IT and cyber risks into clear, actionable insights for senior stakeholders while confidently challenging decisions when needed.
• The capability to manage and develop high-performing teams, fostering collaboration and coaching for growth, while contributing to the advancement of IA methodologies, governance standards and technology risk maturity.
• The ability to leverage technology-enabled auditing tools, including automation, analytics, and digital platforms, to enhance audit effectiveness, efficiency and insights.
• A strong command of IT and cyber risk fundamentals, including ITGCs, IT governance, cybersecurity principles, SOX technology controls, and relevant industry frameworks such as NIST and COBIT.
• Advanced knowledge of ERP, OT, AI and core business systems, such as SAP/SAP HANA, dispatch/industrial control systems, and the ability to connect IT controls to underlying business processes.
• Technical understanding of security architecture and controls, including network/perimeter security, identity and access management, secure software development, cloud and virtualization environments, vulnerability management, penetration testing, and incident response.

What CRH Offers You

• Highly competitive base pay
• Comprehensive medical, dental and disability benefits programs
• Group retirement savings program
• Health and wellness programs
• An inclusive culture that values opportunity for growth, development, and internal promotion

About CRH

CRH has a long and proud heritage. We are a collection of hundreds of family businesses, regional companies and large enterprises that together form the CRH family. CRH operates in a decentralized, diversified structure that allows you to work in a small company environment while having the career opportunities of a large international organization.

CRH is an affirmative action and equal opportunity employer.

EOE/Vet/Disability

CRH is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, status as a protected veteran or any other characteristic protected under applicable federal, state, or local law.

AI tools may be used in certain stages of the employment lifecycle, such as candidate review; however, all final employment decisions will be made by a person.