Senior Information Technology Audit Manager

Smith Arnold Partners; Connecticut; On-site; USD 140,000 - 190,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

401k with match

Job summary

Smith Arnold Partners is seeking an IT Audit Senior Manager with deep cybersecurity expertise to lead risk-based audits and strengthen enterprise cybersecurity governance.

You will partner with IT, security, and business leadership to identify technology risks, provide practical recommendations, and elevate the organization’s security posture across global operations.

Qualifications

• 8–15 years of progressive experience in cybersecurity, technology risk, cyber consulting, or IT audit.
• Fortune 500, Big Four Cyber Risk or leading cybersecurity consulting experience preferred.
• Demonstrated leadership of complex cybersecurity audits and advisory engagements.

Responsibilities

• Lead and execute IT audit and in-depth cybersecurity control reviews.
• Perform risk assessments to identify technology and cybersecurity risks across units.
• Serve as SME for cybersecurity including penetration testing and network controls.
• Evaluate design and effectiveness of information security and IT controls.
• Conduct security reviews, vulnerability assessments, and testing.
• Partner with IT and business leaders to identify risks and drive remediation.
• Prepare and present audit reports to senior management.
• Track findings and remediation plans to ensure timely closure.

Skills

Cybersecurity expertise

IT audit

Risk management

Governance

Executive communication

Stakeholder management

Data analytics

Education

Bachelor's degree in IT / Cybersecurity

Master's degree (a plus)

Tools

NIST CSF

ISO 27001

CIS Controls

Job description

Are you looking for a high-visibility cyber risk position where you can be the subject matter expert in cybersecurity for a progressive internal audit department?

Our client, a dynamic and growing global organization, is seeking an IT Audit Senior Manager with subject matter expertise in cybersecurity. This is an outstanding opportunity for a technically strong cyber audit & risk professional who wants to play a key role in strengthening IT governance, cybersecurity controls, and enterprise risk management while partnering with business and technology leaders across the organization.

In this high-visibility role, you will evaluate the effectiveness of IT cybersecurity safeguards, and technology risk management processes, while helping the organization enhance its overall security posture and compliance framework. You’ll lead risk-focused audits, assess emerging technology risks, and provide practical recommendations that improve controls and strengthen operational resilience.

What are people saying about this company

• Great company to work for, nice people
• They seem like they care about the employees
• Flexible schedule and management friendliness

Title: Technology & Cybersecurity Senior Audit Manager

Location: New Haven County

Benefits: Medical / Dental / 401k w/match

Key Responsibilities

• Lead and execute IT audit and in depth cybersecurity control reviews
• Perform risk assessments to identify technology and cybersecurity risks across business units
• Become the SME for cybersecurity, including penetration testing, firewalls, networks, etc.
• Evaluate the design and effectiveness of information security and IT controls
• Conduct security reviews, vulnerability assessments, and penetration testing
• Partner with IT, cybersecurity, and business leadership to identify risks and drive remediation
• Prepare and present clear, actionable audit reports to senior management
• Track and monitor audit findings and remediation plans to ensure timely resolution

  Qualifications

  • Bachelor's degree in IT, Cybersecurity, Computer Science, Information Technology, Engineering, Accounting, or another related discipline.
  • Master's degree is a plus
  • Preferred Certifications: CISA, CISSP, CISM, CRISC, CIA, CCSP, GIAC, CEH and/or Cloud Security
  • Approximately 8-15 years of progressive experience in cybersecurity, technology risk, cyber consulting, cyber assurance, or IT audit, with a significant focus on enterprise cybersecurity.
  • Experience within a Fortune 500, Big Four Cyber Risk practice, or leading cybersecurity consulting firm strongly preferred
  • Demonstrated experience leading complex cybersecurity audits and advisory engagements across large, global organizations.
  • Experience evaluating enterprise cybersecurity programs, cloud security, cyber resilience, operational resilience, and technology governance.
  • Working knowledge of IT General Controls (ITGCs) and SOX requirements, with the ability to coordinate effectively with audit leaders responsible for ITGC assurance.
  • Deep knowledge of cybersecurity frameworks including NIST CSF, NIST 800-53, ISO 27001, CIS Controls, COBIT, and applicable cybersecurity and privacy regulations.
  • Experience partnering with Chief Information Security Officers, technology executives, and business leadership on cybersecurity risk management and governance.
  • Strong executive presence with exceptional communication, presentation, stakeholder management, and report-writing skills.
  • Demonstrated ability to translate complex technical risks into clear business impacts and actionable recommendations.
  • Experience leveraging data analytics, automation, and continuous monitoring to enhance audit effectiveness.