Manager - IT Audit Services

Duke Energy; United States; Hybrid; USD 120,000 - 180,000; Full time

Job summary

Duke Energy seeks a Manager, IT Audit Services in Charlotte, NC, to lead a high‑performing audit team and advance the IT risk program. This role requires building risk-based IT and cybersecurity audit plans and delivering high-quality audit results across the enterprise.

Travel up to 15% and collaboration with internal stakeholders to drive improvements in governance, controls, and AI-enabled analytics. A strong professional certification portfolio is highly valued.

Qualifications

• Bachelor’s degree in a related discipline or equivalent.
• Eight+ years in IT auditing, cybersecurity, technology risk management, information security, public accounting, consulting, or related field.
• Certifications include CISA, CISSP, CISM, CRISC, CIPP, PMP, CIA.

Responsibilities

• Lead Corporate Audit Services leadership team and mentor staff.
• Develop risk-based IT and cybersecurity audit plans for enterprise coverage.
• Plan and manage internal audit efforts with quality and timely delivery.
• Coordinate with external auditors and regulators as appropriate.
• Maintain awareness of enterprise objectives and evolving tech risks for alignment.
• Champion data analytics, automation, and AI-enabled audit techniques.

Skills

Leadership

IT governance

Cybersecurity

Risk management

Data analytics

AI governance

Cloud auditing

Stakeholder management

Communication

Education

Bachelor’s degree

MBA

CISA

CISSP

CISM

CRISC

CIPP

PMP

CIA

Job description

Manager, IT Audit Services

More than a career – a chance to make a difference in people's lives. Build an exciting, rewarding career with us – help us make a difference for millions of people every day. Consider joining the Duke Energy team, where you’ll find a friendly work environment, opportunities for growth and development, recognition for your work, and competitive pay and benefits.

Duke Energy, the largest electric power holding company in the United States, is committed to making life better for millions of people every day – brighter, more convenient, more comfortable, more efficient, more productive and more sustainable. At Duke Energy, you’ll find exciting roles, competitive compensation and benefits, recognition, growth opportunities and great work-life balance.

This position is located in Charlotte, NC and will require up to approximately 15% travel annually.

Responsibilities and Duties

• Leadership & Talent Development
  • Support the Corporate Audit Services leadership team in building and sustaining a high-performing team.
  • Advance the department’s talent strategy through recruiting, developing, and mentoring employees.
  • Execute the strategic and operational initiatives of a high-performing internal audit function.
• Audit Strategy & Planning
  • Develop risk‑based IT and cybersecurity audit plans that support both near‑term and long‑term audit coverage across the enterprise.
  • Adjust audit priorities and resource plans in response to changing business strategies, regulations, threat conditions, technologies, and risk exposures.
• Audit Execution & Quality
  • Plan and manage internal audit efforts including establishing and executing appropriate audit approaches and methods.
  • Ensure high quality audit results and well‑crafted audit report deliverables while remaining mindful of executing within prescribed time budgets.
  • Ensure audit work complies with the Global Internal Audit Standards, departmental methodology, and applicable quality expectations.
• Collaboration & Operational Effectiveness
  • Ensure complete communication and seamless coordination within Corporate Audit Services to maximize effectiveness, efficiency and consistency across the function.
  • Foster collaboration within the department, management and project teams.
• Stakeholder & External Auditor Engagement
  • Build and maintain effective relationships within business segment executives and other personnel.
  • Coordinate technology‑related assurance activities with other assurance providers, external auditors, and regulatory bodies, as appropriate.
• Industry & Technical Knowledge
  • Maintain an understanding of the Company’s strategic objectives, business priorities, and evolving industry risks to ensure audit activities remain aligned with enterprise needs.
  • Maintain awareness of emerging cybersecurity threats, technology trends, and digital transformation initiatives affecting the Company.
• Data Analytics, Automation, and Innovation
  • Champion the use of data analytics, visualization, automation, and AI‑enabled audit techniques to improve audit quality, efficiency, and coverage.
  • Identify opportunities to use data and technology throughout risk assessment, planning, testing, reporting, and continuous monitoring.
  • Drive improvements in audit methods, tools, quality, productivity, and stakeholder value.

Key skills / experience to be successful in this role

• Demonstrated experience leading complex audit, risk, compliance, or technology‑related initiatives.
• Strong understanding of IT governance, cybersecurity, technology controls, and risk management frameworks.

Basic / Required Qualifications

• Bachelor’s degree in Computer Science, Management Information Systems, Information Technology, Cybersecurity, Engineering, Accounting, Business Administration, Economics, Data Science, Artificial Intelligence, or a related discipline.
• Eight (8) or more years of relevant professional experience in IT auditing, cybersecurity, technology risk management, information security, public accounting, consulting, or a related field.

Desired Qualifications

• Professional Experience
  • Two (2) or more years of IT audit management or supervisory experience.
  • Experience within a large public accounting, consulting, utility, energy, or highly regulated organization.
• Experience auditing cloud technologies, cybersecurity programs, data governance, digital transformation initiatives, and emerging technologies.
• Artificial Intelligence & Data Analytics Experience
  • Auditing, assessing, or governing artificial intelligence, machine learning, generative AI, advanced analytics, or algorithmic decision‑making processes.
  • Understanding of AI governance frameworks, model risk management principles, responsible AI practices, and applicable regulatory requirements.
  • Experience utilizing data analytics, automation, visualization, and AI tools to enhance audit coverage and efficiency.
  • Familiarity with technologies such as Generative AI, large language models (LLMs), machine learning, predictive analytics, and AI‑enabled business applications.

Education & Certifications

• Advanced degree such as an MBA, Master’s in Information Systems, Cybersecurity, Data Analytics, Data Science, Artificial Intelligence, or related field.
• One or more professional certifications, including:
  • CISA (Certified Information Systems Auditor)
  • CISSP (Certified Information Systems Security Professional)
  • CISM (Certified Information Security Manager)
• CRISC (Certified in Risk and Information Systems Control)
• CIPP (Certified Information Privacy Professional)
• PMP (Project Management Professional)
• CIA (Certified Internal Auditor)

Leadership Competencies

• Demonstrated success leading teams through organizational and technological change.
• Demonstrated verbal, written, and executive communication skills.
• Ability to influence and collaborate effectively across all levels of the organization.
• Strong business acumen, critical thinking, and strategic decision‑making skills.
• Proven ability to build partnerships, resolve conflict, and drive results in a complex environment.

Work Arrangements and Travel Requirements

• Mobility Classification: Hybrid.
• Travel Requirements: 5-15%.
• Relocation Assistance Provided (as applicable).
• No Represented/Union Position.
• No Visa Sponsored Position.
• This role requires the ability to work lawfully in the U.S. without employment-based immigration sponsorship, now or in the future.

Diversity & Inclusion

Duke Energy is an equal opportunity employer and does not discriminate against any employee or applicant for employment because of race, color, sex, pregnancy, childbirth or related medical conditions, including but not limited to lactation, religion, national origin, ancestry, ethnicity, citizenship, sexual orientation, gender identity, gender expression, age, marital status, physical or mental disability, genetic information, medical condition, military status, or protected veteran status. Duke Energy complies with all applicable state, federal and local laws, regulations and ordinances prohibiting discrimination.