Senior IT Audit Manager – Cyber & AI

JCW Group; New York (NY); On-site; USD 150,000 - 190,000; Full time

Job summary

JCW Group is partnering with a leading regional bank to hire a Senior IT Audit Manager for its expanding Internal Audit team. This high-impact role focuses on IT and information security audits, strengthening control frameworks, and maturing data analytics and AI usage in audits.

You will lead engagements, mentor staff, and collaborate with IT, security, data science, and business leaders while staying abreast of AI governance and regulatory guidance.

Qualifications

• 8+ years of IT audit, information security, or related risk experience, ideally within banking.
• Strong understanding of information security principles, control frameworks, and regulatory requirements applicable to financial institutions.
• Proven experience leading IT audits with a focus on information security and technology risk.
• Experience with data analytics and/or AI tools within audit processes (using AI to run audits more effectively) is a plus.
• Familiarity with AI risk and governance concepts (model risk management, responsible AI, AI-related regulatory frameworks) is a strong plus.
• Ability to engage and influence senior stakeholders across IT, security, data/AI, and business teams.
• Excellent communication, analytical, and project management skills.
• CISA, CISSP, CIA, or other relevant certifications preferred.

Responsibilities

• Lead and execute IT audit engagements with a primary focus on information security, including access management, network security, vulnerability management, and cybersecurity governance.
• Manage audit engagements end-to-end, including planning, fieldwork, reporting, and stakeholder communication.
• Assess the design and operating effectiveness of IT general controls, application controls, and information security controls across key banking systems and platforms.
• Evaluate the bank's technology risk posture against regulatory expectations and industry frameworks (e.g., NIST, FFIEC, ISO 27001).
• Use AI in audit work: Identify opportunities to incorporate data analytics and AI tools into audit planning, testing, and reporting to improve audit efficiency, coverage, and insight generation.
• Audit AI as a risk: Assess the bank's governance and controls over AI/ML models and tools in use across the business — including model risk management, data privacy, algorithmic bias, third-party AI vendor risk, and alignment with emerging AI regulatory guidance (e.g., NIST AI RMF, OCC/FFIEC guidance on AI use in banking).
• Provide actionable insights and recommendations to strengthen information security controls, governance, and risk management practices — including practices specific to AI adoption.
• Collaborate closely with IT, information security, data science/AI, and business leaders to act as a strategic partner and advisor on technology and AI risk.
• Stay informed on emerging cyber threats, AI-related regulatory changes, and industry trends impacting financial institutions.
• Mentor and develop junior audit team members, fostering a high-performing IT audit function that is fluent in both traditional IT risk and AI risk.

Skills

IT audit

Information security

Regulatory knowledge

Stakeholder management

Leadership

Communication

Project management

Education

CISA

CISSP

CIA

Tools

AI tools

Data analytics

Job description

JCW is partnering with a leading regional bank to hire a Senior IT Audit Manager for their expanding Internal Audit team. This is a high-impact role within a well-established financial institution, offering the opportunity to drive meaningful improvements to the bank's technology risk and control environment, with a particular focus on information security and the responsible governance of AI-driven systems.

This position provides strong visibility to senior leadership, with a focus on leading complex IT and information security audits, strengthening the bank's control framework, and helping the audit function mature its use of data analytics and AI — both as tools that improve how audits are done, and as a growing risk area that audits need to cover.

Key Responsibilities

• Lead and execute IT audit engagements with a primary focus on information security, including access management, network security, vulnerability management, and cybersecurity governance.
• Manage audit engagements end-to-end, including planning, fieldwork, reporting, and stakeholder communication.
• Assess the design and operating effectiveness of IT general controls, application controls, and information security controls across key banking systems and platforms.
• Evaluate the bank's technology risk posture against regulatory expectations and industry frameworks (e.g., NIST, FFIEC, ISO 27001).
• Use AI in audit work: Identify opportunities to incorporate data analytics and AI tools into audit planning, testing, and reporting to improve audit efficiency, coverage, and insight generation.
• Audit AI as a risk: Assess the bank's governance and controls over AI/ML models and tools in use across the business — including model risk management, data privacy, algorithmic bias, third-party AI vendor risk, and alignment with emerging AI regulatory guidance (e.g., NIST AI RMF, OCC/FFIEC guidance on AI use in banking).
• Provide actionable insights and recommendations to strengthen information security controls, governance, and risk management practices — including practices specific to AI adoption.
• Collaborate closely with IT, information security, data science/AI, and business leaders to act as a strategic partner and advisor on technology and AI risk.
• Stay informed on emerging cyber threats, AI-related regulatory changes, and industry trends impacting financial institutions.
• Mentor and develop junior audit team members, fostering a high-performing IT audit function that is fluent in both traditional IT risk and AI risk.

Ideal Candidate Profile

• 8+ years of IT audit, information security, or related risk experience, ideally within banking.
• Strong understanding of information security principles, control frameworks, and regulatory requirements applicable to financial institutions.
• Proven experience leading IT audits with a focus on information security and technology risk.
• Experience with data analytics and/or AI tools within audit processes (using AI to run audits more effectively) is a plus.
• Familiarity with AI risk and governance concepts (model risk management, responsible AI, AI-related regulatory frameworks) is a strong plus.
• Ability to engage and influence senior stakeholders across IT, security, data/AI, and business teams.
• Excellent communication, analytical, and project management skills.
• CISA, CISSP, CIA, or other relevant certifications preferred.

This is a high-visibility role offering competitive compensation, leadership responsibility, and long-term career progression within a respected regional banking organization.

We aim to be an equal opportunity recruiter, and we are determined to ensure that no applicant receives less favorable treatment on the grounds of gender, age, disability, religion, belief, sexual orientation, marital status, or race, or is disadvantaged by conditions or requirements.