Strategic Cybersecurity Audit Senior Manager

Smith Arnold Partners; Connecticut; On-site; USD 140,000 - 190,000; Full time

Job summary

Smith Arnold Partners seeks an IT Audit Senior Manager to serve as the cybersecurity SME within a high-visibility internal audit program. You will lead risk-based IT governance reviews and advise on control enhancements across the enterprise.

In this role, you’ll evaluate cybersecurity safeguards, coordinate with IT and business leaders, and deliver clear findings and practical remediation plans to strengthen security posture and resilience.

Qualifications

• Bachelor's degree in IT, Cybersecurity, CS, or related discipline.
• 8-15 years of progressive experience in cybersecurity, technology risk, or IT audit with enterprise focus.
• Prefer experience in Fortune 500, Big Four Cyber Risk practice or leading cybersecurity consulting.
• Deep knowledge of cybersecurity frameworks (NIST CSF, NIST 800-53, ISO 27001, CIS Controls, COBIT).

Responsibilities

• Lead IT audit and in-depth cybersecurity control reviews.
• Perform risk assessments to identify technology and cybersecurity risks across units.
• Become the SME for cybersecurity, including controls and testing.
• Evaluate design and effectiveness of information security and IT controls.
• Conduct security reviews, vulnerability assessments, and testing.
• Partner with IT, cybersecurity, and business leaders to drive remediation.
• Prepare and present audit reports to senior management.
• Track audit findings and remediation plans to ensure timely closure.

Skills

Penetration testing

Firewall security

Network security

Information security controls

Security risk assessments

Data analytics

Education

Bachelor's degree in IT, Cybersecurity, CS

Master's degree is a plus

Job description

Smith Arnold Partners seeks an IT Audit Senior Manager to serve as the cybersecurity SME within a high-visibility internal audit program. You will lead risk-based IT governance reviews and advise on control enhancements across the enterprise.

In this role, you’ll evaluate cybersecurity safeguards, coordinate with IT and business leaders, and deliver clear findings and practical remediation plans to strengthen security posture and resilience.