Develop and carry out a risk-based internal audit plan for IT operations, security controls, and compliance processes
Conduct audits from planning through reporting, evaluating the effectiveness of IT controls, policies, and procedures
Identify control gaps and IT-related risks during audits
Prepare clear audit findings reports and work with stakeholders on remediation plans
Work closely with IT, Security, Engineering, and other teams to gather evidence and facilitate audit processes
Serve as a liaison with external auditors and internal teams
Support external compliance audits and certifications
Maintain comprehensive audit workpapers and documentation repositories using a modern GRC tool
Help build audit playbooks and improve audit workflows
Stay up-to-date on industry best practices and emerging regulations

University degree in Information Systems, Computer Science, MIS, or a related field
Professional certification such as CISA (Certified Information Systems Auditor) or CIA is strongly preferred
5+ years of experience in IT auditing, IT risk, or related compliance fields
Demonstrated experience leading or executing multiple IT audits end-to-end
Experience in a high-growth or technology-driven environment is a plus
Strong understanding of IT governance, security, and compliance frameworks
Familiarity with cloud platforms and enterprise IT controls
Experience with GRC or audit management tools is a plus
Excellent communication skills
Strong organizational and project management skills
A collaborative, integrity-driven approach and a problem-solving mindset are essential

Audit & Compliance Manager

Key skills