Senior Information Technology Audit Manager

Smith Arnold Partners; Connecticut; On-site; USD 140,000 - 190,000; Full time

Job summary

Smith Arnold Partners seeks an IT Audit Senior Manager to serve as the cybersecurity SME within a high-visibility internal audit program. You will lead risk-based IT governance reviews and advise on control enhancements across the enterprise.

In this role, you’ll evaluate cybersecurity safeguards, coordinate with IT and business leaders, and deliver clear findings and practical remediation plans to strengthen security posture and resilience.

Qualifications

• Bachelor's degree in IT, Cybersecurity, CS, or related discipline.
• 8-15 years of progressive experience in cybersecurity, technology risk, or IT audit with enterprise focus.
• Prefer experience in Fortune 500, Big Four Cyber Risk practice or leading cybersecurity consulting.
• Deep knowledge of cybersecurity frameworks (NIST CSF, NIST 800-53, ISO 27001, CIS Controls, COBIT).

Responsibilities

• Lead IT audit and in-depth cybersecurity control reviews.
• Perform risk assessments to identify technology and cybersecurity risks across units.
• Become the SME for cybersecurity, including controls and testing.
• Evaluate design and effectiveness of information security and IT controls.
• Conduct security reviews, vulnerability assessments, and testing.
• Partner with IT, cybersecurity, and business leaders to drive remediation.
• Prepare and present audit reports to senior management.
• Track audit findings and remediation plans to ensure timely closure.

Skills

Penetration testing

Firewall security

Network security

Information security controls

Security risk assessments

Data analytics

Education

Bachelor's degree in IT, Cybersecurity, CS

Master's degree is a plus

Job description

Are you looking for a high-visibility cyber risk position where you can be the subject matter expert in cybersecurity for a progressive internal audit department?

Our client, a dynamic and growing global organization, is seeking an IT Audit Senior Manager with subject matter expertise in cybersecurity. This is an outstanding opportunity for a technically strong cyber audit & risk professional who wants to play a key role in strengthening IT governance, cybersecurity controls, and enterprise risk management while partnering with business and technology leaders across the organization.

In this high-visibility role, you will evaluate the effectiveness of IT cybersecurity safeguards, and technology risk management processes, while helping the organization enhance its overall security posture and compliance framework. You’ll lead risk-focused audits, assess emerging technology risks, and provide practical recommendations that improve controls and strengthen operational resilience.

What are people saying about this company

• Great company to work for, nice people
• They seem like they care about the employees
• Flexible schedule and management friendliness

Title: Technology & Cybersecurity Senior Audit Manager

Location: New Haven County

Key Responsibilities

• Lead and execute IT audit and in depth cybersecurity control reviews
• Perform risk assessments to identify technology and cybersecurity risks across business units
• Become the SME for cybersecurity, including penetration testing, firewalls, networks, etc.
• Evaluate the design and effectiveness of information security and IT controls
• Conduct security reviews, vulnerability assessments, and penetration testing
• Partner with IT, cybersecurity, and business leadership to identify risks and drive remediation
• Prepare and present clear, actionable audit reports to senior management
• Track and monitor audit findings and remediation plans to ensure timely resolution

Qualifications

• Bachelor's degree in IT, Cybersecurity, Computer Science, Information Technology, Engineering, Accounting, or another related discipline.
• Master's degree is a plus
• Preferred Certifications: CISA, CISSP, CISM, CRISC, CIA, CCSP, GIAC, CEH and/or Cloud Security
• Approximately 8-15 years of progressive experience in cybersecurity, technology risk, cyber consulting, cyber assurance, or IT audit, with a significant focus on enterprise cybersecurity.
• Experience within a Fortune 500, Big Four Cyber Risk practice, or leading cybersecurity consulting firm strongly preferred.
• Demonstrated experience leading complex cybersecurity audits and advisory engagements across large, global organizations.
• Experience evaluating enterprise cybersecurity programs, cloud security, cyber resilience, operational resilience, and technology governance.
• Working knowledge of IT General Controls (ITGCs) and SOX requirements, with the ability to coordinate effectively with audit leaders responsible for ITGC assurance.
• Deep knowledge of cybersecurity frameworks including NIST CSF, NIST 800-53, ISO 27001, CIS Controls, COBIT, and applicable cybersecurity and privacy regulations.
• Experience partnering with Chief Information Security Officers, technology executives, and business leadership on cybersecurity risk management and governance.
• Strong executive presence with exceptional communication, presentation, stakeholder management, and report-writing skills.
• Demonstrated ability to translate complex technical risks into clear business impacts and actionable recommendations.
• Experience leveraging data analytics, automation, and continuous monitoring to enhance audit effectiveness.