Senior IT Audit Manager, Banking & Cyber Risk

Block; San Francisco (CA); On-site; USD 180,000 - 240,000; Full time

Job summary

Block is seeking an IT Audit Senior Manager to lead risk-based audits of technology, cybersecurity, and banking systems across the organization. The role focuses on evaluating controls, data integrity, and third‑party services within a regulated financial services environment.

You will drive risk assessment, planning, execution, and remediation validation, while coaching junior staff and shaping audit methodology.

Qualifications

• 7+ years of IT audit experience in a regulated financial institution.
• Strong understanding of internal controls, risk assessment, and audit methodologies.
• Excellent written and verbal communication, with ability to translate complex issues for diverse audiences.
• Experience applying data analytics and AI tools across the audit lifecycle to strengthen risk assessment and testing.
• Executive presence and cross-functional collaboration to influence stakeholders.

Responsibilities

• Plan and perform risk-based IT audits, including walkthroughs, control design assessments, and testing.
• Assess technology and cybersecurity risks across IAM, privileged access, cloud, network security, and vulnerability management.
• Audit banking applications and interfaces, focusing on data integrity and automated processing.
• Evaluate third-party and affiliate technology services and oversight.
• Maintain IT audit universe and inform the annual audit plan.
• Coach colleagues and support integrated audits across broader banking processes.

Skills

IT audit

Data analytics

AI in audit

Communication

Project management

Education

CPA, CIA, CRCM, CISA certifications

Job description

Block is seeking an IT Audit Senior Manager to lead risk-based audits of technology, cybersecurity, and banking systems across the organization. The role focuses on evaluating controls, data integrity, and third‑party services within a regulated financial services environment.

You will drive risk assessment, planning, execution, and remediation validation, while coaching junior staff and shaping audit methodology.