Senior IT Audit Lead — Cyber & AI Risk

JCW Group; New York (NY); On-site; USD 150,000 - 190,000; Full time

Job summary

JCW Group is partnering with a leading regional bank to hire a Senior IT Audit Manager for its expanding Internal Audit team. This high-impact role focuses on IT and information security audits, strengthening control frameworks, and maturing data analytics and AI usage in audits.

You will lead engagements, mentor staff, and collaborate with IT, security, data science, and business leaders while staying abreast of AI governance and regulatory guidance.

Qualifications

• 8+ years of IT audit, information security, or related risk experience, ideally within banking.
• Strong understanding of information security principles, control frameworks, and regulatory requirements applicable to financial institutions.
• Proven experience leading IT audits with a focus on information security and technology risk.
• Experience with data analytics and/or AI tools within audit processes (using AI to run audits more effectively) is a plus.
• Familiarity with AI risk and governance concepts (model risk management, responsible AI, AI-related regulatory frameworks) is a strong plus.
• Ability to engage and influence senior stakeholders across IT, security, data/AI, and business teams.
• Excellent communication, analytical, and project management skills.
• CISA, CISSP, CIA, or other relevant certifications preferred.

Responsibilities

• Lead and execute IT audit engagements with a primary focus on information security, including access management, network security, vulnerability management, and cybersecurity governance.
• Manage audit engagements end-to-end, including planning, fieldwork, reporting, and stakeholder communication.
• Assess the design and operating effectiveness of IT general controls, application controls, and information security controls across key banking systems and platforms.
• Evaluate the bank's technology risk posture against regulatory expectations and industry frameworks (e.g., NIST, FFIEC, ISO 27001).
• Use AI in audit work: Identify opportunities to incorporate data analytics and AI tools into audit planning, testing, and reporting to improve audit efficiency, coverage, and insight generation.
• Audit AI as a risk: Assess the bank's governance and controls over AI/ML models and tools in use across the business — including model risk management, data privacy, algorithmic bias, third-party AI vendor risk, and alignment with emerging AI regulatory guidance (e.g., NIST AI RMF, OCC/FFIEC guidance on AI use in banking).
• Provide actionable insights and recommendations to strengthen information security controls, governance, and risk management practices — including practices specific to AI adoption.
• Collaborate closely with IT, information security, data science/AI, and business leaders to act as a strategic partner and advisor on technology and AI risk.
• Stay informed on emerging cyber threats, AI-related regulatory changes, and industry trends impacting financial institutions.
• Mentor and develop junior audit team members, fostering a high-performing IT audit function that is fluent in both traditional IT risk and AI risk.

Skills

IT audit

Information security

Regulatory knowledge

Stakeholder management

Leadership

Communication

Project management

Education

CISA

CISSP

CIA

Tools

AI tools

Data analytics

Job description

JCW Group is partnering with a leading regional bank to hire a Senior IT Audit Manager for its expanding Internal Audit team. This high-impact role focuses on IT and information security audits, strengthening control frameworks, and maturing data analytics and AI usage in audits.

You will lead engagements, mentor staff, and collaborate with IT, security, data science, and business leaders while staying abreast of AI governance and regulatory guidance.