Senior Auditor, Internal Audit – Cyber & Technology

1P284 THE CARLYLE GROUP EMPLOYEE CO., LLC; Washington (District of Columbia); On-site; USD 110,000 - 115,000; Full time

Job summary

The Carlyle Group seeks a Senior Auditor in Internal Audit – Cyber and Technology to lead audits focused on technology and cyber risk within a global asset manager. You will execute all audit phases, interact with Cybersecurity and front/middle/back office, and apply AI tools to enhance efficiency and quality.

You will contribute to risk assessments, audit planning, and clear executive-ready reporting, driving continuous improvement in processes and controls.

Qualifications

• Bachelor’s degree required; accounting, finance, business, information systems or related field preferred.
• Master’s degree or professional certifications preferred (CISA, CPA, CIA).
• Minimum 2–4 years of internal audit, IT audit or risk advisory experience; financial services/asset management exposure preferred.
• Experience with SOX ITGC testing and external auditor coordination is valued.

Responsibilities

• Audit Execution – Lead and execute all phases of audit engagements with professional judgment.
• Map system flows, identify risks, and evaluate control design and operating effectiveness.
• Obtain and validate audit evidence; produce narratives, risk/control matrices, and reports.
• Identify deficiencies and provide remediation guidance; track issues to closure.
• Apply AI-enabled tools to analyze populations and accelerate documentation drafting.
• Engage stakeholders and contribute to risk assessment and audit planning.

Skills

Cybersecurity

IT risk

SOX ITGC

Auditing

Data analytics

Stakeholder management

Risk assessment

Education

Bachelor’s degree

CISA/CPA/CIA preferred

Tools

AI tools

Job description

Position Summary

Carlyle's Global Internal Audit & Advisory function delivers independent assurance and practical insights that strengthen risk management, internal controls, and business operations across one of the world's leading alternative asset managers. The team partners directly with the business and maintains rigorous independence while driving real impact. The Senior Auditor, Internal Audit – Cyber and Technology, is a key member of the team and executes the audits in accordance with the annual audit plan, with approximately 70% of work focused on technology and cyber audits and 30% on process and compliance. As a Senior Auditor you will be hands‑on across all phases of the audit lifecycle—planning, walkthroughs, fieldwork, testing, and reporting—with a primary focus on technology and cyber risk. Your work will involve interacting with a broad range of stakeholders within Cybersecurity and Technology, as well as front, middle and back office, gaining exposure to complex processes, systems and platforms. This is not a checkbox audit role; you will bring genuine curiosity, exercise professional judgment and actively leverage AI tools to modernise how audit work gets done. You will also support the annual risk assessment process and ongoing audit reporting, giving you visibility into how a world‑class internal audit function operates from the ground up.

Working Conditions

In‑Office Requirement: 4 days a week.

Primary Responsibilities

• Audit Execution – Lead and execute all phases of audit engagements, planning, walkthroughs, fieldwork, testing and reporting, using established methodologies and your own professional judgment.
• Conduct walkthroughs of technology‑enabled business processes to map system flows, identify risks and evaluate the design and operating effectiveness of controls.
• Obtain, analyse and validate audit evidence; prepare clear process narratives, risk and control matrices, testing workpapers and well‑reasoned audit reports.
• Identify control deficiencies and execution gaps; document findings with precision, including root causes, impacts and practical remediation guidance.
• Support issue tracking, remediation validation and follow‑up testing through to closure.
• AI‑Enabled Audit Work – Apply AI‑enabled tools to analyse full populations, surface trends and anomalies, accelerate documentation drafting, and sharpen audit conclusions.
• Design, refine and systematise effective prompts that improve the quality, consistency and efficiency of AI‑assisted audit work across the team.
• Exercise sound professional judgment with AI and analytics outputs—validating results, understanding model limitations, and ensuring every conclusion is grounded in appropriate evidence.
• Identify and champion opportunities to enhance audit efficiency through data analytics, automation and AI integration within existing processes.
• Stakeholder Engagement & Other Activities – Contribute to the annual risk assessment and audit planning process by bringing a point of view on emerging technology and cyber risks that shapes the forward‑looking audit agenda.
• Support the preparation of Audit Committee and senior management reporting, translating audit results and trends into clear, executive‑ready narratives.
• Serve as a credible point of contact for stakeholders across Cybersecurity, Technology, and front, middle, and back office, communicating findings, observations and recommendations with clarity and confidence.
• Own assigned workstreams end‑to‑end: drive timelines, anticipate obstacles and deliver leadership solutions.
• Actively contribute to the continuous improvement of audit processes, methodology and reporting by bringing ideas that make the function sharper over time.

Requirements

• Education & Certificates – Bachelor’s degree, required; concentration in Accounting, Finance, Business Administration, Information Systems or a related field, preferred. Master’s degree and/or relevant certifications or progress toward certification (e.g., CISA, CPA, CIA), preferred.
• Professional Experience – Minimum of 2‑4 years of experience in internal audit, IT audit, risk advisory or external audit, required. Experience with a technology focus in financial services, alternative asset management, investment management or similarly regulated industries, preferred.
• Competencies & Attributes – Solid understanding of cybersecurity and technology domains, including IAM, data management, system operations, etc., and the ability to connect technical risks to business impact.
• Experience with SOX compliance, including ITGC testing, documentation, remediation support and coordination with external auditors.
• Comfortable evaluating business process controls in a publicly traded or similarly regulated environment.
• Proficient and confident working with large, complex data sets; familiarity with data analytics tools is a plus.
• Natural curiosity, analytical rigor, asks sharp questions, tests assumptions, and challenges conventional thinking to get to the real risk.
• AI‑ and data‑forward, with a demonstrated ability to leverage analytics, automation and emerging tools to deliver better audit outcomes.
• Clear and precise communicator with strong written and verbal skills, disciplined documentation and a relentless focus on quality and timeliness.
• Thrives in dynamic environments, builds trust‑based relationships with stakeholders, and brings adaptability and collaborative instincts to improve people and the function.

Benefits & Compensation

The compensation range for this role is specific to Washington, DC and reflects skill sets, experience, certifications and other factors. The anticipated base salary range is $110,000 to $115,000. In addition to the base salary, the hired professional will enjoy a comprehensive benefits package spanning retirement benefits, health insurance, life insurance and disability, paid time off, paid holidays, family planning benefits and various wellness programs. The hired professional may also be eligible to participate in an annual discretionary incentive program, with awards dependent on individual and organisational performance.