Senior Cybersecurity & Technology Audit Leader

Capstone Search Advisors; Wallingford (CT); On-site; USD 150,000 - 190,000; Full time

Job summary

Capstone Search Advisors is seeking a Senior Cyber Security and Audit Manager to lead complex cybersecurity audits and advise on technology risk strategies for enterprise-wide resilience. The role emphasizes independence within Internal Audit and close collaboration with executive leadership.

The candidate will oversee audits across governance, cloud security, IAM, and incident response, while aligning with regulatory requirements and emerging technologies.

Qualifications

• Bachelor's degree in Information Systems, Cybersecurity, Computer Science, Information Technology, Engineering, Accounting, or related STEM.
• Master's degree preferred.
• Certified Information Systems Auditor (CISA)
• Certified Information Systems Security Professional (CISSP)
• Certified Information Security Manager (CISM)
• Certified in Risk and Information Systems Control (CRISC)
• Certified Internal Auditor (CIA)
• Additional certifications such as CCSP, GIAC, CEH, Security+, or cloud security certifications are preferred.
• 8-12+ years of progressive experience in cybersecurity, technology risk, cyber consulting, cyber assurance, or IT audit, with focus on enterprise cybersecurity.
• Experience within a Fortune 500, Big Four Cyber Risk practice, or leading cybersecurity consulting firm strongly preferred.
• Demonstrated experience leading complex cybersecurity audits and advisory engagements across large, global organizations.
• Experience evaluating enterprise cybersecurity programs, cloud security, cyber resilience, operational resilience, and technology governance.
• Working knowledge of IT General Controls (ITGCs) and SOX requirements, with the ability to coordinate effectively with audit leaders responsible for ITGC assurance.
• Deep knowledge of cybersecurity frameworks including NIST CSF, NIST 800-53, ISO 27001, CIS Controls, COBIT, and applicable cybersecurity and privacy regulations.
• Experience partnering with Chief Information Security Officers, technology executives, and business leadership on cybersecurity risk management and governance.
• Strong executive presence with exceptional communication, presentation, stakeholder management, and report-writing skills.
• Demonstrated ability to translate complex technical risks into clear business impacts and actionable recommendations.
• Experience leveraging data analytics, automation, and continuous monitoring to enhance audit effectiveness.

Responsibilities

• Cybersecurity & Technology Risk Leadership – lead the development and execution of the audit strategy.
• Lead cybersecurity and technology risk audits as part of annual plan.
• Serve as IA SME on cybersecurity, technology risk, and digital transformation.
• Collaborate with VP IA to identify emerging tech/cyber risks for the plan.
• Monitor external cyber threats, regulatory changes, and new tech for audit coverage.
• Coordinate audit activities with external specialists and auditors.
• Lead independent assessments of controls: governance, SOC, IAM, PAM, cloud security, network, endpoint, patch mgmt, threat detection, data protection, third-party risk, DR/BC, OT/ICS, AI governance, DevSecOps.

Education

Bachelor's degree in Information Systems, Cybersecurity, Computer Science, Information Technology, Engineering, Accounting, or related STEM discipline

Master's degree preferred

Job description

Capstone Search Advisors is seeking a Senior Cyber Security and Audit Manager to lead complex cybersecurity audits and advise on technology risk strategies for enterprise-wide resilience. The role emphasizes independence within Internal Audit and close collaboration with executive leadership.

The candidate will oversee audits across governance, cloud security, IAM, and incident response, while aligning with regulatory requirements and emerging technologies.