Technology Audit Leader - IT Risk & SOX Expert

CarMax Business Services; Richmond (VA); On-site; USD 126,000 - 201,000; Full time

Job summary

CarMax is seeking a Sr. Manager, Audit Services – Technology to lead technology audits and advisory engagements, strengthening governance, risk management, and compliance across the organization.

You will shape the audit plan, manage complex projects, and guide a high-performing team to deliver insights that mitigate risk and promote operational excellence. Based in Richmond, VA, this on-site role requires collaboration with senior leadership and cross-functional partners to evaluate IT

Qualifications

• Bachelor’s degree in a related field.
• CISA, CRISC, CIA certifications.
• 8+ years of IT audit, risk, or compliance.
• 2+ years of leadership experience.
• Strong knowledge of IT controls, cybersecurity, cloud technologies.

Responsibilities

• Direct planning and execution of technology audits and reviews, including SOX IT compliance, system implementations, and risk-based IT audits.
• Oversee project management activities, ensuring timelines, budgets, and resources align with strategic goals.
• Lead and develop a high-performing team, providing coaching, feedback, and growth opportunities.
• Communicate audit results and recommendations clearly to key stakeholders and senior leadership through high-impact deliverables.
• Support risk assessment and annual audit planning, aligning with enterprise priorities and best practices.

Skills

Leadership

IT audit

SOX 404

Risk assessment

Governance

Communication

Project management

Education

Bachelor's degree

Job description

CarMax is seeking a Sr. Manager, Audit Services – Technology to lead technology audits and advisory engagements, strengthening governance, risk management, and compliance across the organization.

You will shape the audit plan, manage complex projects, and guide a high-performing team to deliver insights that mitigate risk and promote operational excellence. Based in Richmond, VA, this on-site role requires collaboration with senior leadership and cross-functional partners to evaluate IT