Job Description
Job Description
Our client, a large commercial bank, is seeking an experienced IT Audit Manager to strengthen the organization’s technology risk oversight and internal control environment. This role, located in the Twin Cities, partners with technology and risk leaders to assess complex systems, evaluate control effectiveness, and deliver independent audit insight that supports sound decision-making. The ideal candidate brings strong audit judgment, clear communication skills, and the ability to lead reviews that align with established standards and business priorities.
Responsibilities:
• Lead and execute technology-focused audit engagements from planning through reporting, ensuring each review is completed on schedule and in accordance with established audit standards.
• Develop risk-based audit scopes, prepare detailed testing strategies, and tailor procedures to address key technology and operational exposures.
• Supervise fieldwork activities, evaluate supporting documentation, and confirm that audit evidence is thorough, accurate, and aligned with engagement objectives.
• Guide and review the work of assigned audit team members to maintain high-quality workpapers, consistent methodology, and reliable conclusions.
• Assess control gaps, validate root causes, and refine recommendations that help management strengthen processes, systems, and governance practices.
• Monitor remediation efforts related to prior audit findings and verify that corrective actions have been implemented effectively and within expected timeframes.
• Prepare and present clear audit reports, risk themes, and control observations to management and senior leadership in a concise and persuasive manner.
• Contribute to ongoing audit risk assessment activities by identifying changing technology risks, emerging issues, and areas requiring future audit attention.
• Coordinate Sarbanes-Oxley related IT control testing by aligning with process owners and external auditors on scope, evidence expectations, and reliance approaches.
• Support broader internal audit initiatives and special assignments, including enterprise risk assessment work, regulatory examination support, and advisory input for new business or technology initiatives.
• Bachelor’s degree in Information Technology, Computer Science, or a closely related field.
• At least 8 years of experience in IT audit, information systems risk, or a comparable audit-related function.
• Certification such as CISA or another relevant IT audit or security credential.
• Strong knowledge of IT general controls, application controls, system architecture, databases, operating systems, change management, and IT governance frameworks.
• Demonstrated ability to manage complex audits, perform Sarbanes-Oxley testing, and produce clear audit documentation and reports.
• Excellent analytical, organizational, verbal, and written communication skills.
• Ability to work effectively with senior stakeholders, influence decisions, and provide credible challenge on risk and control matters.
• Banking, public accounting, regulatory, or external audit experience is preferred.