Sr. Manager IT Audit

Vestis Corporation; Roswell (GA); On-site; USD 140,000 - 210,000; Full time

Job summary

Vestis Corporation seeks an Internal Audit Senior Manager – IT to lead the IT internal audit and SOX IT control program. The role focuses on IT risk oversight, ERP and cybersecurity controls, and collaboration with IT and Finance for timely remediation.

The ideal candidate has 6+ years in IT audit or SOX, ERP experience (Oracle E-Business Suite preferred), and professional certifications such as CISA. Strong leadership and executive communication are essential.

Qualifications

• 6+ years of IT audit, IT risk management, or SOX compliance experience.
• Experience with ERP systems, especially Oracle E-Business Suite, preferred.
• Professional certifications such as CISA preferred; CPA/CIA/CISSP/CISM a plus.

Responsibilities

• Leads IT audit and compliance program, including ITGCs, application controls, and cybersecurity risk areas.
• Develops risk-based IT audit plans aligned to ERM priorities.
• Audits ERP systems, infrastructure, IAM, change management, and third‑party risk.
• Evaluates IT control design and operating effectiveness; identifies improvement opportunities.
• Oversees SOX IT compliance, ITGC testing and automated controls.
• Partners with IT, Finance, and external auditors to ensure timely SOX testing and remediation.
• Prepares clear audit reports for senior leadership and Audit Committee.
• Monitors emerging IT risks and updates audit plans accordingly.
• Leads and mentors IT audit staff; drives continuous improvement in methodologies.

Skills

IT audit

ERM risk focus

SOX IT controls

IT governance

cybersecurity awareness

leadership

communication

Education

Bachelor’s degree in Information Systems, Accounting, or related field

Tools

Alteryx

Power BI

SQL

Job description

Meet Vestis®: For the People Who Make It All Work At Vestis®, we provide uniforms, workplace supplies, and professional cleaning that help businesses simplify their workday and keep their teams safe, confident, and focused on what matters most. More than a provider, we are a partner in productivity, trusted to keep you running. Join us and build a career supporting the people who make it all work. Job Overview The Internal Audit Senior Manager – IT leads the organization’s IT internal audit and compliance program, with primary responsibility for IT risk and compliance oversight, execution of ERM-aligned audit projects, and facilitation of SOX IT control attestation. This role provides independent and objective assurance over IT governance, cybersecurity, systems, and data integrity while partnering with IT and business leadership to strengthen the control environment and support regulatory compliance. Responsibilities/Essential Functions

• Leads the development and execution of the IT audit and compliance program, including ITGCs, application controls, and cybersecurity risk areas.
• Develops and executes risk-based IT audit plans aligned to Enterprise Risk Management (ERM) priorities.
• Conducts audits of ERP systems, infrastructure, identity and access management, change management, and third-party risk.
• Evaluates IT control design and operating effectiveness and identifies opportunities to strengthen the control environment.
• Oversees the SOX IT compliance program, including coordination of ITGC testing and automated controls.
• Partners with IT, Finance, and external auditors to ensure timely completion of SOX testing and remediation.
• Prepares clear and actionable audit reports for senior leadership and the Audit Committee.
• Monitors emerging IT risks and incorporates them into audit planning.
• Leads and mentors IT audit staff while driving continuous improvement in audit methodologies and tools. Performs other duties as needed.
• Strong knowledge of IT General Controls, application controls, and SOX compliance requirements.
• Understanding of cybersecurity frameworks such as NIST and ISO.
• Ability to align audit activities with ERM priorities and assess complex IT risk environments.
• Strong analytical, communication, and leadership skills.
• Ability to translate technical risks into business impacts and manage multiple priorities effectively.
• Excellent written and verbal communication skills, including executive-level reporting.
• Strong leadership and team development capabilities.
• Ability to manage multiple priorities and deadlines in a dynamic environment.
• Experience with audit, GRC, or data analytics tools strongly preferred (e.g., Alteryx, Power BI, SQL).
• Bachelor’s degree in Information Systems, Accounting, or a related field required.
• 6+ years of experience in IT audit, IT risk management, or SOX compliance.
• Experience with ERP systems, including Oracle E-Business Suite preferred.
• Professional certifications such as CISA is preferred; CPA, CIA, CISSP, or CISM a plus.
• Demonstrates leadership and ownership of IT audit and compliance programs.
• Builds strong relationships with stakeholders and communicates effectively at all levels.
• Applies professional skepticism and sound judgment in evaluating risks.
• Drives continuous improvement and maintains integrity and independence in all audit activities.