Associate Director - IT Audit

Job Description:

We are looking for an experienced IT Audit professional to lead risk-based technology audit engagements, manage client relationships, and provide technical guidance to audit teams. The role requires strong expertise in IT controls, information systems, risk assessment, audit planning, and project management.

Key Responsibilities:

- Lead and execute risk-based IT audit and technology assurance assignments.

- Plan audit engagements, develop audit programs, define procedures, and review workpapers and deliverables.

- Supervise day-to-day fieldwork and monitor engagement progress, timelines, and quality.

- Review and evaluate IT general controls, application controls, technology processes, and information systems.

- Identify technology and control risks and recommend practical remediation measures.

- Apply knowledge of current technology environments and emerging trends to identify risks and potential control issues.

- Review audit findings and reports to ensure accuracy, completeness, and alignment with engagement objectives.

- Provide technical guidance and mentorship to team members, particularly on technology controls and IT audit procedures.

- Manage multiple engagements simultaneously across diverse client environments.

- Build and maintain strong relationships with client management and key stakeholders.

- Manage client expectations around scope, timelines, deliverables, and audit findings.

- Communicate audit observations, risks, and recommendations effectively to senior client stakeholders.

- Support business development activities, proposal preparation, and client presentations where required.

- Drive continuous improvement through effective use of audit methodologies, technology, and data analytics tools.

Required Skills & Experience:

- 10-18 years of experience in IT Audit, Technology Risk, IT Assurance, or Information Systems Audit.

- Strong experience leading risk-based IT audit assignments from planning through reporting.

- Strong understanding of IT General Controls (ITGC), application controls, access controls, change management, IT operations, and technology risk.

- Experience managing and reviewing audit workpapers, testing procedures, findings, and reports.

- Strong project and team management experience.

- Ability to manage multiple assignments and stakeholders in a consulting environment.

- Strong client-facing and relationship-management skills.

- Excellent verbal and written communication skills.

- Strong analytical, problem-solving, and decision-making capabilities.

Preferred Qualifications:

- CISA, CISSP, CIA, CRISC, or equivalent certification.

- Experience with SOX, SOC 1/SOC 2, ISO 27001, IT risk assessments, and regulatory audits.

- Exposure to cloud, cybersecurity, ERP, data, and emerging technology risks.

- Experience in a Big 4 or large professional services/consulting environment.

- Strong understanding of IT audit methodologies, frameworks, and industry best practices.