Source Job

  • Lead the technology audit function, developing a risk-based IT audit plan aligned with business objectives and regulations.
  • Direct audits covering cybersecurity, cloud architecture, IAM, data privacy, and compliance with ISO 27001, NIST, COBIT, and SOC 2.
  • Mentor a high-performing IT audit team and present findings to executive leadership and the Audit Committee.

IT Audit Cybersecurity Cloud Architecture Risk Assessment Data Analytics

20 jobs similar to Director, IT Audit

Jobs ranked by similarity.

$180,000–$230,000/yr
US

  • Lead projects from client acquisition to final delivery and oversee client service teams on multiple engagements.
  • Perform technical security assessments, audits, and risk evaluations across applications and infrastructure.
  • Mentor and develop staff while cultivating client relationships and cross-selling firm services.

The Bonadio Group is a leading accounting, advisory, and consulting firm providing next-level solutions to clients across industries. The firm values diversity, innovation, and professional growth, offering mentoring and training programs with a path to partnership.

Europe

  • Independently plan and conduct IT and cybersecurity risk assessments across laboratories, regional infrastructure, and central IT services.
  • Assess technical and organizational controls including network security, IAM, endpoint security, cloud, logging, and backup resilience.
  • Translate technical findings into clear business risks and pragmatic recommendations, then present results to technical teams and management.

Eurofins Scientific is an international life sciences company providing analytical testing services across industries to make life and the environment safer, healthier, and more sustainable. With about 63,000 staff and over 950 laboratories in 60 countries, it operates as a decentralized, entrepreneurial network committed to diversity, equity, and inclusion.

$160,000–$180,000/yr
US

  • Lead and mature cybersecurity compliance programs including SOC 2 Type 2 and ISO 27001 readiness.
  • Drive cloud and application security across AWS and Azure, integrating secure SDLC and DevSecOps practices.
  • Manage corporate IT operations, identity and access, and build the cybersecurity team as the organization grows.

Genea is a leader in property technology, providing cloud-based physical security, submeter billing, and on-demand HVAC solutions to over 1 million users across 39 countries. It has been recognized as a Top Workplace from 2021-2025 with a 4.3 Glassdoor rating, fostering a team-oriented and transparent culture.

US

  • Lead enterprise and division risk assessments to identify strategic, operational, compliance, technology, and cybersecurity risks.
  • Maintain the enterprise risk register, develop KRIs/KPIs, and produce executive-level risk reports and dashboards.
  • Evaluate policies and controls to address weaknesses, drive corrective actions, and improve ERM processes.

SkyePoint Decisions is a cybersecurity architecture and engineering IT service provider headquartered in Dulles, Virginia, serving federal government clients. It is a certified small business with a collaborative culture focused on innovation and mission success.

Global

  • Own global certification programs like ISO 27001 and SOC 2, and advise engineering teams on secure development.
  • Collaborate directly with engineers to audit cloud infrastructure, CI/CD pipelines, and AI-driven security controls.
  • Assess risks of emerging technologies and drive continuous compliance improvements across the organization.

Picus Security is an exposure validation company that proves what attackers can exploit and what defenses stop, turning exposures into defensible decisions. As a fast-growing global remote team, it values continuous security validation and has a 95% recommendation rate.

$125,000–$208,000/yr
Global

  • Manage information security risk assessments and evaluate security issues and controls.
  • Direct security tasks in business initiatives, including third-party vendor and GRC programs.
  • Support regulatory compliance (GLBA, PCI, SOX) and supervise a security team.

Pathward is a financial empowerment company that works with innovators to increase financial availability, choice, and opportunity for all. The company fosters an inclusive culture of problem solvers and innovators, embracing a HUMBLE*HUNGRY*SMART approach.

US Unlimited PTO

  • Lead and mentor a high-performing Security Engineering and CloudSecOps team, defining the security engineering roadmap and ensuring resilient security controls across cloud, hybrid, and enterprise environments.
  • Partner with IT, DevOps, Engineering, and Product to embed secure-by-design practices, automate security monitoring, and drive incident readiness and vulnerability management.
  • Own cloud security architecture, identity and access management, and security tooling across AWS, Azure, GCP, and hybrid infrastructure to align with business risk tolerance.

symplr provides a healthcare operations platform that drives effective, efficient, and connected workflows. This remote-first company has employees across the US, India, and the Netherlands, guided by values of teamwork, customer focus, and integrity.

$30,000–$45,000/yr

  • Execute PawaPay's cybersecurity programme across West Africa with risk assessments, vulnerability reviews and security control assessments.
  • Coordinate regional incident response and drive remediation of vulnerabilities, audit findings and security risks with Engineering and Operations.
  • Act as primary cybersecurity contact for West Africa, supporting regulators, audits, and security awareness initiatives.

PawaPay is a pan-African fintech enabling local payment channels for the mass market, processing over 4 million transactions daily across 20 African countries. It has an entrepreneurial, modern culture and a remote team across Europe, Africa and Asia.

$210,000–$265,000/yr
US Unlimited PTO

  • Own the enterprise-wide security strategy, protecting information assets across corporate and product environments.
  • Ensure compliance with federal and state regulations, while leading audits and improving disaster recovery programs.
  • Collaborate with leadership to embed operational rigor and security best practices across a transforming organization.

Pluralsight provides a learning platform dedicated to accelerating technology skills for today's tech workforce. The company is mission-driven and fosters a culture of inclusion, belonging, and continuous learning.

US

  • You will set POGO's technology strategy and roadmap, aligning it with the strategic plan.
  • You will own the cybersecurity program, including risk posture and compliance.
  • You will lead the IT team, setting priorities and service standards.

Founded in 1981, POGO is a nonpartisan watchdog exposing government waste, corruption, and abuse of power. It has a $7 million annual budget and over 50 employees.

US

  • Lead information security risk assessments and cyber risk management activities, translating technical findings into business risk.
  • Perform compliance monitoring and control assessments against policies, frameworks, and regulatory requirements.
  • Support audits, third-party security assessments, policy governance, and security awareness initiatives.

DriveTime Family of Brands is the largest privately owned used car sales, finance, and servicing company in the U.S., headquartered in Tempe, AZ and Dallas, TX. We're Great Place to Work certified with a culture that values growth, camaraderie, and innovation.

$114,800–$165,000/yr
US

  • Own Abnormal's governance committees, including AI, Data, and Security Governance.
  • Manage the enterprise policy program end-to-end, from drafting to stakeholder acknowledgment.
  • Oversee risk management operations, including risk assessments, exceptions, and audits.

Abnormal AI protects the humans behind the world's most critical organizations from AI-powered cybercrime. Over 5,000 enterprises trust our behavioral AI platform, and we offer a collaborative, fast-paced security culture.

US 3w PTO

  • Own and mature internal and Managed GRC programs, including federal SSPs, POA&Ms, audits, and risk assessments.
  • Collaborate with CISOs, engineers, and control owners to translate compliance requirements into practical technical controls.
  • Lead and develop a GRC team while introducing automation and AI to improve scalability and consistency.

The company provides managed Governance, Risk & Compliance (GRC) and security assurance services, with a strong focus on federal security programs and frameworks like NIST, SOC 2, and CMMC. It supports a growing GRC team and emphasizes low-ego collaboration, automation, and AI-enabled approaches to scale delivery.

$165,000–$175,000/yr
Global

  • Lead IT strategy, infrastructure, systems, and cybersecurity aligned with business and clinical goals.
  • Oversee IT operations, service delivery, budgeting, vendor management, and compliance with healthcare regulations.
  • Mentor and develop IT staff, fostering a culture of collaboration, accountability, and continuous improvement.

Uprise Health transforms the delivery and accessibility of mental and behavioral healthcare, aiming to bring whole person care to individuals worldwide. The company emphasizes values of compassion, integrity, collaboration, velocity, and advocacy, fostering a culture of care and support within partner organizations.

US

  • Lead IT strategy, operations, and security, including support, enterprise technology, and automation.
  • Drive AI and automation initiatives to eliminate manual work and improve employee experience.
  • Manage technology vendors, optimize spend, and build a high-performing IT team.

Appen is a leader in AI training data, specializing in human-generated data to train, fine-tune, and evaluate AI models across generative AI, large language models, computer vision, and speech recognition. The company, with a global crowd of over 1 million contributors in more than 200 countries, has been powering AI for over 30 years.

$95,600–$153,900/yr
US

  • Lead end-to-end execution of IT audits including planning, fieldwork, documentation, and reporting, while managing co-source teams.
  • Assess IT general controls, application controls, and cybersecurity controls across ERP, cloud, and manufacturing environments.
  • Execute IT SOX control testing for external audit and serve as key contact for external auditors.

Stanley Black & Decker is a global tool company providing innovative solutions for industries and consumers. With approximately 43,500 diverse and high-performing professionals worldwide, they foster a culture of purpose, integrity, and continuous improvement.

North America

  • Perform activities to measure and monitor compliance with company policies and procedures.
  • Facilitate certifier requests and information gathering for external and internal audits.
  • Lead onsite and remote audits, both certification and customer audits, to ensure compliance.

ServiceNow provides the AI control tower for business reinvention, bringing together AI, data, and workflows to help 85% of the Fortune 500 work smarter, faster, and better. The company fosters an AI-native culture where technology and talent are unstoppable together, with a large global employee base.

Brazil

  • Execute risk-based cybersecurity and IT audits to evaluate controls and identify risks.
  • Assess security configurations across access, cloud, vulnerability, and incident response domains.
  • Lead audit teams and communicate findings clearly to technical and non-technical stakeholders.

US

  • Lead the enterprise Identity & Access Management strategy and architecture, driving Zero Trust and AI identity initiatives.
  • Modernize legacy IAM capabilities through cloud transformation, automation, and improved user experience.
  • Establish governance frameworks for identity lifecycle, privileged access, and compliance while managing budgets and vendor relationships.

Genworth and CareScout simplify and dignify the aging experience, helping people find, fund, and understand aging care. A Fortune 1000 company headquartered in Richmond, VA, they foster an inclusive culture guided by values like 'Make it human' and 'Make it better.'

US

  • Develop and maintain the information security internal audit program, aligning with FedRAMP and CMMC.
  • Own monthly continuous monitoring assessments and serve as a technical point of contact during audits.
  • Build automated evidence collection and policy-as-code checks across cloud and CI/CD systems.

Everbridge helps enterprises and government organizations prepare for, respond to and recover from critical events. This role is fully remote, and the company emphasizes collaboration, compliance, and technical excellence across its teams.