Senior Information Technology Audit Manager

JCW Group; New York (NY); On-site; USD 120,000 - 160,000; Full time

Job summary

JCW Group partners with a leading regional bank to hire a Senior IT Audit Manager for the Internal Audit team. The role focuses on driving improvements to the bank's technology risk and control environment, especially information security, with visibility to senior leadership.

The position emphasizes leading complex IT and information security audits, maturing data analytics usage, and mentoring junior auditors within a high-impact function.

Qualifications

• 8+ years of IT audit or information security experience.
• Banking or financial institution experience preferred.
• Knowledge of regulatory requirements and control frameworks.

Responsibilities

• Lead IT audit engagements with a focus on information security, including access management, network security, vulnerability management, and cybersecurity governance.
• Manage audit engagements end-to-end: planning, fieldwork, reporting, stakeholder communication.
• Assess the design and operating effectiveness of IT general controls, application controls, and information security controls across banking systems.
• Evaluate technology risk posture against regulatory expectations (NIST, FFIEC, ISO 27001).
• Incorporate data analytics and AI tools into audit planning, testing, and reporting.
• Provide actionable insights to strengthen controls, governance, and risk management.
• Collaborate with IT, information security, and business leaders as a strategic advisor.
• Stay informed on emerging cyber threats and regulatory changes.

Skills

IT audit

Information security

Risk management

Tools

Data analytics

AI tools

Job description

JCW is partnering with a leading regional bank to hire a Senior IT Audit Manager for their expanding Internal Audit team. This is a high-impact role within a well-established financial institution, offering the opportunity to drive meaningful improvements to the bank's technology risk and control environment, with a particular focus on information security.

This position provides strong visibility to senior leadership, with a focus on leading complex IT and information security audits, strengthening the bank's control framework, and helping the audit function mature its use of data analytics and emerging technology.

Key Responsibilities

• Lead and execute IT audit engagements with a primary focus on information security, including access management, network security, vulnerability management, and cybersecurity governance.
• Manage audit engagements end-to-end, including planning, fieldwork, reporting, and stakeholder communication.
• Assess the design and operating effectiveness of IT general controls, application controls, and information security controls across key banking systems and platforms.
• Evaluate the bank's technology risk posture against regulatory expectations and industry frameworks (e.g., NIST, FFIEC, ISO 27001).
• Identify opportunities to incorporate data analytics and AI tools into audit planning, testing, and reporting to improve audit efficiency and coverage.
• Provide actionable insights and recommendations to strengthen information security controls, governance, and risk management practices.
• Collaborate closely with IT, information security, and business leaders to act as a strategic partner and advisor on technology risk.
• Stay informed on emerging cyber threats, regulatory changes, and industry trends impacting financial institutions.
• Mentor and develop junior audit team members, fostering a high-performing IT audit function.

Ideal Candidate Profile

• 8+ years of IT audit, information security, or related risk experience, ideally within banking.
• Strong understanding of information security principles, control frameworks, and regulatory requirements applicable to financial institutions.
• Proven experience leading IT audits with a focus on information security and technology risk.
• Experience with data analytics and/or AI tools within audit processes is a plus.
• Ability to engage and influence senior stakeholders across IT, security, and business teams.
• Excellent communication, analytical, and project management skills.
• CISA, CISSP, CIA, or other relevant certifications preferred.

This is a high-visibility role offering competitive compensation, leadership responsibility, and long-term career progression within a respected regional banking organization.

We aim to be an equal opportunity recruiter, and we are determined to ensure that no applicant receives less favorable treatment on the grounds of gender, age, disability, religion, belief, sexual orientation, marital status, or race, or is disadvantaged by conditions or requirements.