Director, Cyber Security – IT Audit

This is a fully remote position, open to applicants in United States.

📋 Description

• Formulate and implement a Cybersecurity and IT audit strategy that aligns with business objectives and risk exposures.

• Oversee cybersecurity and IT risk evaluations and establish risk-based audit programs.

• Organize, conduct, and report on audits and advisory reviews in areas such as cybersecurity, IT, cloud, data protection and privacy, identity and access management, technology resilience, third-party technology risk, AI, and emerging technologies.

• Manage the IT SOX program, which includes assessing ITGC risks, defining the scope, designing controls, supervising co-sourced testing, and coordinating reliance with external auditors.

• Counsel Cyber & IT leaders on risk and control issues while aligning on work priorities, scope, planning, and execution.

• Offer independent insights on risk and control related to IT governance, cybersecurity posture, and significant technology projects.

• Convert complex cybersecurity and technology risks into business-oriented insights for senior management and the Audit Committee.

• Oversee the Cybersecurity & IT audit budget and resources, including co-sourcing and specialist support.

• Cultivate and develop audit talent.

• Promote innovation and ongoing improvement through a risk-based methodology, data analytics, automation, and AI-enabled auditing techniques.

⛳️ Requirements

• 10–15 years of experience in Cybersecurity and IT Audit, encompassing risk assessment, control evaluation, hands-on audit execution, and strategic advisory across various IT environments.

• In-depth knowledge of cybersecurity and technology frameworks, including NIST CSF, ISO 27001, and COBIT.

• Familiarity with EU and UK regulations such as DORA, NIS2, GDPR, and the EU AI Act.

• Extensive experience with IT SOX, covering ITGC scoping, oversight of third-party testing, and reliance on external auditors.

• Comprehensive understanding of cybersecurity and technology risks related to ITGCs, cloud security, identity and access management, data protection and privacy, encryption, vulnerability management, network security, incident response, technology resilience, third-party risk, and AI and emerging technologies.

• Strong leadership and interpersonal skills, including experience in talent development, continuous improvement initiatives, and building trusted relationships at all organizational levels.

• CISSP, CISA, CIA, CISM, or CRISC certification preferred.

🏝️ Benefits

• Competitive salary and performance-based bonuses.

• Comprehensive health and wellness benefits.

• Opportunities for professional development and continuing education.

• Flexible work arrangements and a supportive work environment.

• Access to the latest tools and technologies in the field.