Senior IT & Cyber Risk Auditor — AI & Cloud

Careerwebsite; Charlotte, Northern (NC, KY); Hybrid; USD 82,000 - 119,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

Parental leave

Paid time off

401(k)

Job summary

Moody's is seeking an IT and cybersecurity audit professional to lead risk-based audits across cloud, AI, and modern technology risks. You will develop an understanding of technology environments, processes, and related risks and controls.

You will plan audit scopes, evaluate governance, cloud security, IAM, data protection, and incident response; perform testing and maintain thorough workpapers; translate findings into actionable recommendations and communicate with Cyber, Technology, Data, and

Qualifications

• 3+ years experience in IT audit, cybersecurity, risk, or controls in Big 4 or global org.
• Strong understanding of IT risk management frameworks (NIST, ISO, COBIT, COSO).
• Experience auditing cloud environments (AWS, Azure, SaaS) including security architecture and access controls.
• Knowledge of identity and access management (IAM, PAM, SSO, MFA) and privileged access oversight.
• Understanding of secure development practices (SDLC, Agile, DevOps, DevSecOps) and application security controls.
• Experience using data analytics tools (Excel, Power BI, Tableau) to support audit testing and insights.
• Technical knowledge covering cybersecurity, cloud, data analytics, IAM, network security, vulnerability management, incident response, data protection, third-party risk, and frameworks like NIST, ISO 27001, SOC 2, DORA, CIS Controls.
• Demonstrated proficiency in AI concepts, with hands-on AI tools to streamline workflows and enhance efficiency.

Responsibilities

• Lead and execute IT and cybersecurity audits with a focus on cloud, AI, and modern technology risks.
• Develop understanding of technology environments, business processes, and associated risks and controls.
• Plan audit scope through process analysis, risk assessment, and control identification.
• Evaluate cybersecurity governance, cloud security, identity access management, infrastructure security, and data protection controls.
• Execute audit testing and maintain high-quality, well-documented workpapers.
• Translate technical findings into clear, actionable business insights and recommendations.
• Communicate effectively with stakeholders across Cyber, Technology, Data, and Product teams.
• Track and validate remediation efforts to ensure sustainable control improvements.

Skills

IT audit

Cybersecurity

Cloud security

IAM & Privileged access

Secure SDLC

Data analytics

NIST/ISO/COSO

AI concepts

Education

Bachelor's degree

CISSP/CISA preferred

Tools

Excel

Power BI

Tableau

Job description

Moody's is seeking an IT and cybersecurity audit professional to lead risk-based audits across cloud, AI, and modern technology risks. You will develop an understanding of technology environments, processes, and related risks and controls.

You will plan audit scopes, evaluate governance, cloud security, IAM, data protection, and incident response; perform testing and maintain thorough workpapers; translate findings into actionable recommendations and communicate with Cyber, Technology, Data, and