SOX IT Audit Lead — ITGC, SDLC & Risk Oversight

KBR Careers; Washington (District of Columbia); On-site; USD 130,000 - 180,000; Full time

Benefits offered by this job

Bonus potential

Comprehensive benefits

Job summary

KBR is seeking an experienced IT Audit Manager to lead the Internal Audit & Advisory team in Washington, DC. This role oversees the IT SOX program, planning, execution, and reporting of ITGC, application controls, automated controls, interface controls, and SDLC testing.

The ideal candidate will manage onshore and offshore teams, collaborate with IT leadership and external auditors, and drive timely remediation of deficiencies to maintain SOX 404 compliance.

Qualifications

• Bachelor's degree required in Information Systems, IT, CS, Accounting, Finance, Audit or related field.
• Minimum of 10 years of progressive IT audit, IT risk management, IT controls, IT compliance, or related experience.
• Minimum of 4 years leading IT SOX programs and audit teams.

Responsibilities

• Lead the annual IT SOX compliance program across IT control domains.
• Develop risk-based testing strategies for ITGCs, application controls, automated and SDLC controls.
• Oversee control assessments, testing, and documentation to verify design and operating effectiveness.
• Direct testing of ITGCs including access management, change management, IT operations, and SDLC controls.
• Coordinate SDLC control testing and production migration processes.
• Oversee testing of automated controls, interfaces, and management reports for financial reporting.

Skills

Leadership

Communication

Risk assessment

IT governance

Cross-functional collaboration

Mentoring teams

Education

Bachelor's degree in Information Systems or related field

Job description

KBR is seeking an experienced IT Audit Manager to lead the Internal Audit & Advisory team in Washington, DC. This role oversees the IT SOX program, planning, execution, and reporting of ITGC, application controls, automated controls, interface controls, and SDLC testing.

The ideal candidate will manage onshore and offshore teams, collaborate with IT leadership and external auditors, and drive timely remediation of deficiencies to maintain SOX 404 compliance.