IT Audit Manager

We're seeking an experienced IT Audit Manager to lead SOX compliance efforts, IT risk mitigation, and process improvement initiatives. This is a critical role requiring Big Four experience and hands‑on knowledge of ERP implementations.

The IT Audit Manager will design, assess, and test General IT Controls (GITCs) and IT Application Controls (ITACs) across financial systems, lead IT SOX compliance during ERP implementations, and provide advisory input to embed controls in system design early. You'll coordinate with internal and external auditors, identify gaps, implement remediation plans, and drive continuous improvement across the organization.

• Design, assess, and test GITCs and ITACs across key financial systems and processes
• Lead IT SOX compliance activities during ERP implementations, collaborating with project teams to embed controls in system design
• Provide proactive advisory input during major IT projects and system implementations
• Coordinate walkthroughs and testing with internal and external auditors; maintain comprehensive documentation
• Identify control gaps and implement remediation plans with stakeholders
• Conduct risk-based audits and cybersecurity risk assessments
• Partner cross‑functionally with IT, finance, and business teams to identify emerging risks
• Develop and leverage data analytics and automation to enhance audit methodologies
• Stay current on technology trends and regulatory frameworks (NIST, COBIT, ISO 27001)
• Manage audit teams, including offshore resources or third‑party vendors

• Bachelor's degree in Information Systems, Accounting, or related field
• 5+ years of experience in IT audit, IT risk management, or IT controls
• Strong SOX 404 compliance and ERP implementation experience
• Big Four public accounting background strongly preferred
• Deep understanding of General IT Controls (GITCs) and IT Application Controls (ITACs)
• Expertise in IT frameworks including COBIT, ISO, NIST, and COSO
• Proven ability to manage end‑to‑end IT audits including SOX 404, pre/post‑implementation reviews, and operational audits
• Experience with change management, access provisioning, and SDLC controls
• Demonstrated leadership in managing audit teams and driving results
• Excellent communication and project management skills across technical and non‑technical audiences
• Strong analytical and problem‑solving abilities with a proactive, self‑starter mindset

• CISA, CPA, or CIA certification

• Hands‑on experience with Oracle FCCS, Microsoft D365, SharePoint, and JD Edwards (JDE)
• Knowledge of GRC tools and automated control testing
• Experience with cloud‑based systems and cybersecurity frameworks
• Proven ability to build trust and influence across dynamic organizations

• Travel:
  Approximately 20% (including international)
• Work Model:
  Dallas TX, Onsite‑Hybrid

If you have the expertise to drive SOX compliance and embed controls into system design from the ground up, we'd love to hear from you.