IT Audit Manager
- Compensation
- Not disclosed
- Location
- Chennai, Tamil Nadu, India
- Work setup
- Not specified
- Seniority
- Not specified
- Employment
- Not specified
- Experience
- Not specified
- Category
- Security
- Posted
Skills
Nice to have
- Strong understanding of SOX 404 requirements, audit methodologies, and internal control frameworks.
- Strong knowledge of cybersecurity, cloud technologies, ERP systems, SDLC processes, and emerging technology risks.
- Excellent leadership, analytical, problem-solving, and project management skills.
- Strong written and verbal communication skills with the ability to influence stakeholders across all levels of the organization.
- Experience presenting audit results and risk matters to senior leadership.
- Experience leveraging data analytics, automation, and AI-enabled technologies to improve audit effectiveness and efficiency.
- Ability to manage multiple priorities and deliver high-quality results in a dynamic global environment.
- Bachelor's degree in Information Systems, Accounting, Computer Science, Cybersecurity, Engineering, Business, or a related field.
- Preferred certifications include CISA, CIA, CISM, CISSP, CPA or other equivalent professional certifications
- Minimum 10 years of progressive experience in IT Audit, Internal Audit, IT Risk, IT Compliance, Cybersecurity, or related disciplines.
- Minimum 4 years of experience leading IT SOX compliance programs and audit teams.
- Demonstrated experience performing and managing SOX 404 testing.
- Strong experience evaluating and testing ITGCs, IT Application Controls (ITACs), SDLC controls, interfaces, automated controls, reports, and Information Produced by the Entity (IPE).
- Experience leading audits within large, complex, multinational organizations.
- Experience managing external auditor relationships and reliance activities.
Full description
Title:
IT Audit Manager
IT Audit Manager
KBR — Delivering Solutions, Changing the World.
KBR is a global leader in delivering science, technology, and engineering solutions to governments and top tier commercial clients to overcome tomorrow’s challenges, always maintaining our commitment to Zero Harm. With a full portfolio of services, proprietary technologies and expertise, our approximately 37,000 employees are ready to handle projects and missions throughout their entire lifecycle, from planning and design to sustainability and maintenance. Whether at the bottom of the ocean or in outer space, our clients trust us to deliver the impossible on a daily basis.
Audit and Advisory Services at KBR plays a trusted role in supporting the company’s governance, risk management, and control environment through independent assurance and practical advisory insights. The team partners across the business to evaluate key risks, strengthen processes, and provide objective perspectives that help KBR operate with integrity, accountability, and continuous improvement.
Summary Section
The IT Audit Manager is responsible for leading and executing KBR's IT audit and IT SOX compliance activities. This role provides independent assurance and advisory support across information technology processes, systems, and emerging technology risks while overseeing the annual IT SOX compliance program.
The IT Audit Manager leads risk assessments, develops audit plans, manages audit and SOX engagements, supervises audit staff and third-party resources, and partners with management to evaluate and improve the effectiveness of governance, risk management, cybersecurity, system development lifecycle (SDLC), and internal control processes.
This position requires strong leadership, technical IT audit expertise, project management skills, and the ability to communicate effectively with stakeholders across all levels of the organization.
Responsibilities:
- Lead the planning and execution of the annual IT audit plan and IT SOX compliance program, including risk assessments, audit scoping, resource planning, and engagement oversight.
- Manage and execute technology-focused audits, SOX activities, advisory engagements, investigations, and special projects across the organization.
- Oversee the evaluation of IT General Controls (ITGCs), IT Application Controls (ITACs), SDLC controls, automated controls, interface controls, reports, and other technology-related controls.
- Assess technology, cybersecurity, operational, and compliance risks and provide independent assurance and advisory support to management.
- Develop and maintain the annual IT audit universe and risk assessment process to identify and prioritize audit activities across technology, cybersecurity, digital transformation, and regulatory compliance areas.