Sr. Manager IT Audit

Colonial Group; Roswell (GA); Hybrid; USD 140,000 - 210,000; Full time

Job summary

Colonial Group is seeking an Internal Audit Senior Manager – IT to lead the IT audit and compliance program, oversee IT risk, SOX IT control attestation, and partner with IT and business leaders to strengthen controls and regulatory compliance.

You will manage ITGCs, application controls, ERP audits, and cyber risk, while mentoring staff and delivering clear executive reports to the Audit Committee. A hybrid in-office role in Roswell, GA is expected.

Qualifications

• Bachelor’s degree in Information Systems, Accounting, or related field.
• 6+ years IT audit, IT risk management, or SOX experience.
• Experience with ERP systems like Oracle E-Business Suite preferred.
• Professional certifications such as CISA; CPA, CIA, CISSP, CISM a plus.

Responsibilities

• Lead IT audit and compliance program, including ITGCs, application controls, and cybersecurity risk areas.
• Develop risk-based IT audit plans aligned to ERM priorities.
• Audit ERP systems, infrastructure, IAM, change management, and third-party risk.
• Evaluate IT controls and drive improvements in the control environment.
• Oversee SOX IT compliance, ITGC testing, and automated controls.
• Collaborate with IT, Finance, and external auditors for SOX testing and remediation.
• Prepare clear audit reports for senior leadership and Audit Committee.
• Monitor emerging IT risks and incorporate into audit planning.
• Mentor IT audit staff and advance audit methodologies and tools.

Skills

IT governance

SOX compliance

Risk assessment

Leadership

Executive reporting

Communication

Critical thinking

Stakeholder management

Analytical skills

Cybersecurity awareness

Education

Bachelor's degree in Information Systems

Bachelor's degree in Accounting

Tools

Alteryx

Power BI

SQL

Job description

Job Overview:

The Internal Audit Senior Manager – IT leads the organization’s IT internal audit and compliance program, with primary responsibility for IT risk and compliance oversight, execution of ERM-aligned audit projects, and facilitation of SOX IT control attestation. This role provides independent and objective assurance over IT governance, cybersecurity, systems, and data integrity while partnering with IT and business leadership to strengthen the control environment and support regulatory compliance.

Responsibilities/Essential Functions:

• Leads the development and execution of the IT audit and compliance program, including ITGCs, application controls, and cybersecurity risk areas.
• Develops and executes risk-based IT audit plans aligned to Enterprise Risk Management (ERM) priorities.
• Conducts audits of ERP systems, infrastructure, identity and access management, change management, and third-party risk.
• Evaluates IT control design and operating effectiveness and identifies opportunities to strengthen the control environment.
• Oversees the SOX IT compliance program, including coordination of ITGC testing and automated controls.
• Partners with IT, Finance, and external auditors to ensure timely completion of SOX testing and remediation.
• Prepares clear and actionable audit reports for senior leadership and the Audit Committee.
• Monitors emerging IT risks and incorporates them into audit planning.
• Leads and mentors IT audit staff while driving continuous improvement in audit methodologies and tools. Performs other duties as needed.

Knowledge/Skills/Abilities:

• Strong knowledge of IT General Controls, application controls, and SOX compliance requirements.
• Understanding of cybersecurity frameworks such as NIST and ISO.
• Ability to align audit activities with ERM priorities and assess complex IT risk environments.
• Strong analytical, communication, and leadership skills.
• Ability to translate technical risks into business impacts and manage multiple priorities effectively.
• Excellent written and verbal communication skills, including executive-level reporting.
• Strong leadership and team development capabilities.
• Ability to manage multiple priorities and deadlines in a dynamic environment.
• Experience with audit, GRC, or data analytics tools strongly preferred (e.g., Alteryx, Power BI, SQL)

Experience/Qualifications:

• Bachelor’s degree in Information Systems, Accounting, or a related field required.
• 6+ years of experience in IT audit, IT risk management, or SOX compliance.
• Experience with ERP systems, including Oracle E-Business Suite preferred.
• Professional certifications such as CISA is preferred; CPA, CIA, CISSP, or CISM a plus.

Competencies:

• Demonstrates leadership and ownership of IT audit and compliance programs.
• Builds strong relationships with stakeholders and communicates effectively at all levels.
• Applies professional skepticism and sound judgment in evaluating risks.
• Drives continuous improvement and maintains integrity and independence in all audit activities.

Working Environment/Safety Requirements/Physical Requirements:

Performs work primarily in a standard office or hybrid environment and must be able to remain seated for extended periods while working on a computer, with occasional standing, walking, and travel as required.