IT Audit Director – Cyber, AI and Cloud

IT AUDIT DIRECTOR – CYBER, AI AND CLOUD

Location: Reston, VA Work Type: Hybrid Salary: $175,000 - $239,000/yr Additional Compensation: Eligible for 35% long-term incentive annual cash bonus Type: Permanent Category: Accounting / Finance

JOB DESCRIPTION

In this compelling leadership position, you will lead efforts examining and analyzing every aspect of our client's IT environment. Focused on the cutting-edge cloud services the organization uses, audits cover a broad range of exciting technologies, providing a challenging environment with tremendous opportunities for personal growth. Within IT Audit, the infrastructure team focuses on evaluating the organization's complex environment of IT processes, systems, and services. Audits focus on highly visible topics such as Artificial Intelligence (AI), cyber security, IT Governance, resiliency, and the management of various operating systems and platforms. In this position, you will take ownership over audits and reviews, set direction, and be hands-on throughout planning, executing, and reporting. You will also play a pivotal role in coaching and mentoring other team members.

THE IMPACT YOU WILL MAKE

The IT Audit Director – Cyber, AI and Cloud role will offer you the flexibility to make each day your own while working alongside people who care so that you can deliver on the following responsibilities:

• Apply specialized technical expertise to direct and oversee audits in often complex areas, such as AI, cyber security, resiliency, and complex infrastructure environments in the cloud.
• Identify risks and assess the potential impact of risks on the organization to develop and adjust audit plans as appropriate and determine areas requiring additional analysis.
• Participate in annual planning to develop annual audit plans that focus on the top current and emerging IT risks.
• Provide day-to-day project management oversight of other IT Auditors, including project guidance and coaching. This includes setting direction, developing innovative test approaches, and reviewing work.
• Be hands-on and conduct testing of highly complex technical topics with autonomy and a keen focus on the highest risk areas.
• Create regular points of view on top risks, such as AI, cyber, or resiliency.
• Inspire team members to innovate new ways of working to achieve results and generate meaningful insights.
• Act as a source of knowledge related to technical domains and coach junior staff.
• Build and maintain relationships with business partners. Provide advice and share Internal Audit knowledge with business partner managers and staff.
• Ideate innovative ways of using data analytics, automation, and AI to perform testing. Help junior staff develop related skills while also executing analytics yourself.

THE EXPERIENCE YOU BRING TO THE TEAM

Minimum Required Experiences and Skills:

• 8 years of experience in IT Audit, IT Risk Management, or Information Security.
• Expert knowledge of cyber security, artificial intelligence, or cloud infrastructure technologies, such as Amazon Web Services.
• Strong project management skills.
• Prior experience coaching and providing feedback to audit staff.
• Excellent written and verbal communication skills. Ability to speak to technical experts in their technical languages.
• Critical thinking skills.
• Data Analytics skills:
• Strong skills in identifying, designing, and implementing visualizations of various data sets.
• Experience with visualization tools (e.g., Power BI, Tableau, Plotly, Seaborn).
• Coding skills and experience with data analytics related languages, such as Python (including SciPy, NumPy, and/or PySpark).
• AI skills:
• Experience using AI solutions to increase effectiveness and efficiency as part of day-to-day audit execution.
• Demonstrated work auditing AI solutions and related risks.
• Knowledge of agentic AI architectures and risks.
• Shows curiosity and adaptability in learning and responsibly applying new technologies, including artificial intelligence, to reimagine how we work.

Desired Experience:

• 10+ years of experience in IT Audit, IT Risk Management, or Information Security.
• At least 5+ years of experience in IT Audit.
• Bachelor's degree or equivalent experience. Master's degree and/or Master of Business Administration in Computer Science, Information Systems, Cyber Security, Mathematics, or related area of study is preferred.
• One or more of the following certifications: CISA, CISSP, CEH, CRISC, CISM.

--- SCREENING QUESTIONS:

• Can you describe your 8+ years of experience in IT Audit, IT Risk Management, or Information Security, including the types of organizations and audit functions you've supported?
• Walk us through a complex technical audit you led in cyber security, artificial intelligence, or cloud infrastructure (such as AWS) where you applied your expert-level knowledge. What were the key risks you identified?
• Tell us about your hands-on experience auditing AI solutions and related risks, including any exposure you have to agentic AI architectures. How did you assess those risks?
• Describe your experience with data visualization and coding skills. Specifically, which visualization tools (Power BI, Tableau, Plotly, Seaborn) and analytics languages (Python, SciPy, NumPy, PySpark) have you used in audit execution, and can you provide an example?
• This is a highly hands-on director role requiring formal people management experience. Tell us about a time you coached and provided feedback to audit staff while simultaneously conducting complex technical testing yourself. How did you balance both responsibilities?
• Our ideal candidate comes from a large, complex financial organization (such as JPM, Wells Fargo, USAA, Fidelity) or similar scale enterprises with infrastructure and cyber audit experience. What large organization have you audited, and what was the scope of complexity in their IT environment?
• Can you speak confidently to technical experts in their technical languages across cloud infrastructure, cyber security, and AI domains? Provide an example of how you've effectively communicated complex technical audit findings to both technical teams and non-technical business stakeholders.