Senior IT & Cyber Risk Audit Leader

Green Key Resources; New York (NY); On-site; USD 150,000 - 210,000; Full time

Job summary

Green Key Resources seeks an experienced Senior Manager of Internal Audit to drive a risk-based audit program with emphasis on IT, cybersecurity, and information security. This role partners with senior audit leadership and acts as a trusted advisor on technology and emerging risks.

The position covers audits across Commercial Banking, Risk Management, and Operations, requiring strong technical judgment and the ability to communicate complex technology risks to executives and the Audit Committee.

Qualifications

• Bachelor’s degree required in accounting, finance, information systems, CS, or related field.
• 8+ years of progressive internal audit or IT risk experience, preferably in a regulated financial services environment.
• CISA, CIA, or CPA certification preferred.
• Credentials in AI governance, data governance, AI ethics, or model risk management are a plus.

Responsibilities

• Lead end-to-end internal audits, risk assessments, and special reviews focused on IT, cybersecurity, information security, technology governance, cloud environments, data protection, third-party risk, and SDLC processes.
• Act as a senior technology and cyber risk advisor within Internal Audit, monitoring emerging threats and evaluating their potential impact on the organization.
• Manage audits across technology and business functions, incorporating relevant technology and IT-dependent controls into broader audit engagements.
• Expand the use of data analytics, automation, and AI-enabled audit techniques to improve audit coverage and effectiveness.
• Establish audit objectives, scope, and testing strategies based on enterprise risk assessments and applicable regulatory requirements.
• Evaluate control design and operating effectiveness, identify deficiencies, determine root causes, and develop practical recommendations for remediation.
• Review audit documentation and workpapers for quality, accuracy, consistency, and compliance with Internal Audit methodology.
• Draft and review audit reports that clearly articulate key risks, control weaknesses, and recommended actions for senior management and the Audit Committee.
• Track management responses and remediation efforts, ensuring identified technology and business risks are appropriately addressed.
• Collaborate with business leaders, regulators, external auditors, and co-sourced providers on technology, cybersecurity, and other specialized reviews.
• Contribute to enterprise risk assessments, SOX activities, regulatory examinations, and other risk and control initiatives involving technology or data.
• Provide leadership, mentorship, and technical direction to auditors and managers, supporting the development of a high-performing audit team.
• Maintain current knowledge of banking regulations, cybersecurity developments, and recognized frameworks, including FFIEC, NIST, COSO, and related industry standards.
• Support senior audit leadership with strategic initiatives, special projects, Board-level requests, and other high-priority assignments.

Skills

IT audit

Cybersecurity

Information security

Regulatory risk

Data analytics

Communication

Project management

Auditing leadership

Education

Bachelor’s degree in Accounting, Finance, Information Systems, Computer Science, or a related discipline

Tools

SQL

Python

Tableau

Power BI

R

Job description

Green Key Resources seeks an experienced Senior Manager of Internal Audit to drive a risk-based audit program with emphasis on IT, cybersecurity, and information security. This role partners with senior audit leadership and acts as a trusted advisor on technology and emerging risks.

The position covers audits across Commercial Banking, Risk Management, and Operations, requiring strong technical judgment and the ability to communicate complex technology risks to executives and the Audit Committee.