Senior IT Audit Lead – Cybersecurity & Cloud Controls

AON PLC; Chicago (IL); On-site; USD 130,000 - 150,000; Full time

Benefits offered by this job

Annual discretionary bonus

401(k) with employer contributions

Medical, dental and vision insurance

Paid holidays and generous vacation

Job summary

Aon plc seeks an experienced Senior Manager - IT Audit to lead complex IT assurance and integrated audits in our Chicago Internal Audit team. You will shape risk-based audit plans with technology leadership, evaluating IT controls and driving improvement across a global control environment.

You will oversee audit teams, communicate findings to executive leadership, and partner with business and technology leaders to address evolving cyber, cloud, data, and regulatory challenges.

Qualifications

• 8+ years in IT audit, information security, or technology risk in large orgs.
• Proven leadership of complex IT audit engagements and teams.
• Experience engaging stakeholders at multiple levels.

Responsibilities

• Lead complex IT assurance and integrated audit projects per the annual plan.
• Develop risk-based audit approaches covering cybersecurity, cloud, data, and operations.
• Evaluate IT controls and present findings to senior management.
• Coach and develop Internal Audit staff and external resources.

Skills

IT audit

Information security

Technology risk

Stakeholder management

Leadership

Communication

Cloud

Data analytics

Risk assessment

Education

Bachelor's degree in IT/Cybersecurity/CS/Finance

Tools

Power BI

Tableau

SQL

Python

AWS

Azure

GCP

Docker

Power Automate

Job description

Aon plc seeks an experienced Senior Manager - IT Audit to lead complex IT assurance and integrated audits in our Chicago Internal Audit team. You will shape risk-based audit plans with technology leadership, evaluating IT controls and driving improvement across a global control environment.

You will oversee audit teams, communicate findings to executive leadership, and partner with business and technology leaders to address evolving cyber, cloud, data, and regulatory challenges.