Senior IT Audit Manager: Information Security & Risk Leader

JCW Group; New York (NY); On-site; USD 120,000 - 160,000; Full time

Job summary

JCW Group partners with a leading regional bank to hire a Senior IT Audit Manager for the Internal Audit team. The role focuses on driving improvements to the bank's technology risk and control environment, especially information security, with visibility to senior leadership.

The position emphasizes leading complex IT and information security audits, maturing data analytics usage, and mentoring junior auditors within a high-impact function.

Qualifications

• 8+ years of IT audit or information security experience.
• Banking or financial institution experience preferred.
• Knowledge of regulatory requirements and control frameworks.

Responsibilities

• Lead IT audit engagements with a focus on information security, including access management, network security, vulnerability management, and cybersecurity governance.
• Manage audit engagements end-to-end: planning, fieldwork, reporting, stakeholder communication.
• Assess the design and operating effectiveness of IT general controls, application controls, and information security controls across banking systems.
• Evaluate technology risk posture against regulatory expectations (NIST, FFIEC, ISO 27001).
• Incorporate data analytics and AI tools into audit planning, testing, and reporting.
• Provide actionable insights to strengthen controls, governance, and risk management.
• Collaborate with IT, information security, and business leaders as a strategic advisor.
• Stay informed on emerging cyber threats and regulatory changes.

Skills

IT audit

Information security

Risk management

Tools

Data analytics

AI tools

Job description

JCW Group partners with a leading regional bank to hire a Senior IT Audit Manager for the Internal Audit team. The role focuses on driving improvements to the bank's technology risk and control environment, especially information security, with visibility to senior leadership.

The position emphasizes leading complex IT and information security audits, maturing data analytics usage, and mentoring junior auditors within a high-impact function.