Senior IT Audit Manager — Remote & Flexible Time Off

Block; New York (NY); On-site; USD 149,000 - 223,000; Full time

Benefits offered by this job

Remote work

Medical insurance

Flexible time off

Job summary

Block is seeking an IT Audit Senior Manager to lead risk-based audits of technology, cybersecurity, and banking applications within a regulated environment. You will drive testing, reporting, and remediation validation while evaluating third-party services and internal controls.

The role emphasizes data analytics, AI tooling, and strong communication to present insights to technical and non-technical stakeholders, with opportunities to influence audit coverage and methodology.

Qualifications

• 7+ years of IT audit experience in a regulated financial institution.
• Experience applying risk-based audit methodologies and continuous improvement in coverage.
• Ability to translate complex technical issues for diverse audiences.
• Experience applying data analytics / AI tools across the audit lifecycle.

Responsibilities

• Plan and perform risk-based IT audits, including walkthroughs and testing.
• Assess technology and cybersecurity risks across IAM, privileged access, cloud, network, and incident response.
• Audit banking applications and interfaces, focusing on controls and data integrity.
• Evaluate third-party and affiliate technology services and oversight.
• Maintain IT audit universe and risk assessment; contribute to annual plan.
• Coach colleagues and support integrated audits across banking processes.

Skills

IT audit expertise

Regulated financial audits

Strong communication

Data analytics / AI in audits

Project management

Executive presence

Regulatory interaction

Education

CPA, CIA, CRCM, CISA or equivalent

Tools

Data analytics tools

Job description

Block is seeking an IT Audit Senior Manager to lead risk-based audits of technology, cybersecurity, and banking applications within a regulated environment. You will drive testing, reporting, and remediation validation while evaluating third-party services and internal controls.

The role emphasizes data analytics, AI tooling, and strong communication to present insights to technical and non-technical stakeholders, with opportunities to influence audit coverage and methodology.