Senior Manager, IT Internal Audit
$126,800–$186,000 year
On-siteNeedham, Massachusetts, United States
Job Summary
Facilitate the enterprise risk management program by engineering technical risk sensing through continuous monitoring, anomaly detection, and analytics to surface emerging risk signals. Own the technology, cybersecurity, data privacy, and third-party dimensions of enterprise risk assessments, translating technical exposure into business-relevant insight for connected and IoT products. Lead technology-focused business reviews driven by risk assessments, embedding data analytics across engagements to test full populations rather than samples. Assess internal control over financial reporting (ICFR/SOX) by owning the ITGC dimension, including access management, change management, and program development, while supporting remediation for high-priority gaps. Help define governance and assurance approaches for AI-enabled processes and tools, working alongside agentic AI teammates to build, train, and improve risk assessment capabilities.
Required Qualifications
- 8+ years of progressive IT audit, IT risk, or technology risk advisory experience
- Big 4 / national firm foundation
- in-house experience
- Strong command of risk-based auditing: technology risk assessment, planning driven by risk, and reporting that connects technical findings to business impact
- Deep ITGC and SOX 404 expertise across ERP environments
- Oracle Cloud/EBS experience
- Coupa or other procure-to-pay platforms experience
- experience coordinating across the three lines
- positioning work for external auditor reliance
- Strong command of access management and segregation of duties concepts
- experience with privileged and service account risk
- experience with GRC/access governance tools (e.g., Oracle Risk Management Cloud or similar)
- Experience testing automated controls, interfaces, key reports, and IPE
- Data analytics capability, including SQL, Python, Alteryx, or similar
- a track record of building monitoring or full-population testing that stuck
- CISA
- CISSP, CRISC, CIA, or cloud certifications
- Working knowledge of cybersecurity frameworks (NIST, ISO 27001)
- data privacy fundamentals
- exposure to IoT/connected product environments
- Versatility across the mandate, anchored in technology but comfortable contributing to ERM facilitation, business reviews, and compliance work
- AI fluency
- a genuine drive to build it
- Executive presence with translation skills
- a builder's mindset
- You'll work with agentic AI teammates daily and help build them
- You're already using AI to accelerate testing and analysis, or you're determined to be
- You have a point of view on how AI systems themselves should be governed and audited
Desired Qualifications
- Big 4 / national firm foundation plus in-house experience strongly preferred
- Oracle Cloud/EBS experience strongly preferred
- Coupa or other procure-to-pay platforms a plus
- CISSP, CRISC, CIA, or cloud certifications a plus
- Working knowledge of cybersecurity frameworks (NIST, ISO 27001) and data privacy fundamentals; exposure to IoT/connected product environments a plus
- Bonus points if you have a point of view on how AI systems themselves should be governed and audited
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.