Lead Senior / Manager, Technology Risk & IT Audit

Origin Staffing; Burlington (MA); Hybrid; USD 125,000 - 180,000; Full time

Benefits offered by this job

Annual bonus

Strong benefits

Mentors and partners

Job summary

Compelling leadership role at a large, publicly traded global technology company driving IT audit and technology risk across modernization initiatives. Hybrid work model (3/2) with strong mentorship and cross-functional collaboration.

The role starts as an individual contributor and grows to include people management within 1–3 years, partnering with IT, Finance, and external advisory firms. Competitive base salary with bonus and strong benefits.

Qualifications

• 5–15 years of IT audit, technology risk, IT controls, or related experience.
• Big 4 / advisory, corporate IT audit, cyber GRC, or ERP controls background.
• Strong ITGC / SOX foundation.
• Experience with major system implementations, ERP upgrades, cloud migrations, or enterprise apps.
• Ability to audit cybersecurity processes without being a hands‑on security engineer.
• Certifications such as CISA/CISM/CISSP/CRISC/CPA preferred.

Responsibilities

• ITGCs, SOX 404, application controls, and technology-dependent controls.
• Cybersecurity process audits and data protection reviews.
• CRM / enterprise platform access and data protection reviews.
• AI governance, AI access controls, and emerging technology risk.
• SDLC, change management, system implementation controls, and audit readiness.
• Audit program development, risk assessment, documentation, and reporting.
• Coordinate with IT, Finance, Internal Audit, Cybersecurity, GRC, external audit, and advisory firms.

Skills

IT Audit

SOX/ITGC

Cybersecurity Audits

ERP Controls

Communication

Project Management

Education

CISA / CPA / CISSP

Tools

AuditBoard

Archer

GRC Tools

Job description

We are conducting a confidential search for a large, publicly traded global technology company seeking a Lead / Manager, IT Audit & Technology Risk.

This is a high-visibility opportunity to help build and mature the IT audit and technology risk function during a major period of enterprise technology modernization. The company is scaling across advanced technology, automation, AI infrastructure, and next-generation device markets, and is investing heavily in systems, cybersecurity, data protection, and governance.

The right candidate will bring a practical mix of ITGCs, SOX, application controls, ERP / systems implementation risk, cybersecurity process audits, and stakeholder-facing technology risk work.

The company is open on level. Candidates with approximately 5+ years of strong experience will be considered, and the company is also open to more experienced Lead, Manager, or Senior Manager-level candidates who can bring deeper ownership and help build the function over time.

Amazing culture, good flexibility (3/2 hybrid), strong mentors and business partners!

What You’ll Work On (gradually, role will evolve as ramp up progresses)

• ITGCs, SOX 404, application controls, and technology-dependent controls
• Cybersecurity process audits, including access, encryption, backup/recovery, SIEM, DLP, endpoint protection, firewall governance, and incident response
• CRM / enterprise platform access and data protection reviews
• AI governance, AI access controls, and emerging technology risk
• SDLC, change management, system implementation controls, and audit readiness
• Audit program development, risk assessment, documentation, and reporting
• Coordination with IT, Finance, Internal Audit, Cybersecurity, GRC, external audit, and outside advisory firms

Qualifications

• 5 15 years of IT audit, technology risk, IT controls, SOX ITGC, cyber risk, ERP controls, or related experience
• Big 4 / advisory, corporate IT audit, cyber GRC, or ERP controls background
• Strong ITGC / SOX foundation
• Experience with major system implementations, ERP upgrades, cloud migrations, or enterprise applications
• Ability to audit cybersecurity processes without needing to be a hands-on security engineer
• Strong communication, documentation, and project management skills
• CISA, CIA, CISM, CISSP, CRISC, CPA, or similar certification preferred

Helpful systems/tools exposure may include

Oracle, SAP, Workday, NetSuite, Microsoft Dynamics, Salesforce, Workiva, AuditBoard, ServiceNow GRC, Archer, SIEM, DLP, IAM, endpoint protection, or related platforms.

The position will start as an individual contributor (with 3rd party support as needed) and will grow over the coming 1-3 years to add direct reports. Part of a broader 8 person team, with broader business partner framework.

Expected base salary range: approximately $125,000 to $180,000, depending on experience and level, plus annual bonus and strong benefits. Level and internal grade, tbd.