
Manager, IT Audit
- Brea, CA
- $110,200-165,400 per year
- Permanent
- Full-time
- Develop a flexible annual audit plan based on risk analysis, incorporating emerging risks.
- Implement the annual audit plan as approved by the Audit Committee, including special tasks or projects as requested.
- Provide assurance on the adequacy and effectiveness of processes, including adherence to industry best practices, policies, procedures, laws, and regulations.
- Prepare detailed reports for each audit conducted, outlining observations, findings, and recommendations; communicate results with the senior leadership team and provide consultation on key issues identified during audits.
- Monitor the implementation status of recommendations made in previous audits.
- Ensure compliance with professional standards (e.g., Global Internal Audit Standards (GIAS)) while maintaining independence, objectivity, and integrity throughout the entire process.
- Manage relationships with internal and external stakeholders, such as regulators, external auditors, and consultants, building trust and addressing concerns raised during reviews.
- Perform consulting engagements to assist management in meeting its objectives, including facilitation, process design, training, and other advisory services.
- Assist in investigating suspected fraudulent activities within the organization.
- Perform other related duties incidental to the work described or as assigned by the VP of Internal Audit.
- Bachelor's degree in Information Technology, Management Information Systems, Computer Science, Finance, Accounting, Business Administration, or related field
- 7+ years of relevant experience with professional audit firms (e.g., Big Four, BDO, Grant Thornton, etc.) and/or internal audit experience with Fortune 500 companies.
- One of the following certifications: CISA, CISM, CISSP, CPA, or CIA.
- Extensive knowledge of auditing principles and practices aligned with Global Internal Audit Standards (GIAS) and/or professional audit firm methodologies.
- Practical experience and expertise in IT compliance and regulatory requirements, such as SOX 404, FDA 21 CFR Part 820, and control frameworks, including ITIL, COBIT, NIST 800-53, ISO 13485, ISO 27001/2, and ISO 62304.
- Strong knowledge of corporate information technologies, including IaaS (e.g., AWS, Azure infrastructure), ERPs (e.g., SAP, Oracle), CRMs (e.g., Salesforce), data warehouses (e.g., Snowflake), and reporting tools (e.g., Tableau).
- Solid understanding of security concepts, such as Network Security, Endpoint Security, Vulnerability Management, Security Incident and Event Management, Identity Governance and Administration (IGA), and physical security.
- Exceptional relationship-building skills with a strong client service focus, as well as excellent communication and presentation skills suited for senior leadership, functional area management, and staff.
- High level of integrity and dependability, with a strong sense of urgency and results orientation.