Senior Internal Audit Manager — Technology Risk, Cybersecurity & AI Assurance

Lead complex technology assurance for cybersecurity, cloud, and AI risk across a global enterprise.

Responsibilities

• Lead complex IT audit engagements covering infrastructure, network and endpoint security, IAM, cloud platforms and security, application controls, data protection, and resilience
• Audit security across sites, laboratories, and OT environments
• Own risk assessment and audit planning, including risk interviews across business and technology teams and building actionable audit plans
• Shape the technology risk agenda with GIS, business, and operations partners and drive alignment with senior leadership and the IT Audit team
• Run cross-functional teams with disciplined project management across GIA auditors, guest auditors, and external contractors and consultants
• Direct third-party engagements, including co-sourcing, staff augmentation, and specialist providers across technology, security, and governance
• Coordinate specialist activities such as penetration testing, red/purple team exercises, and targeted technical assessments
• Assure AI use across the business, including agentic AI and citizen-developed tools, verifying security, controls, governance, and alignment to applicable regulations
• Advance how GIA operates by applying AI across the audit lifecycle, including continuous monitoring, control automation, reporting, quality assurance, and analytics
• Help deploy modern audit methodologies and tools, including agile auditing
• Advise on cyber resilience, supplier cyber risk, and data governance
• Provide independent assurance over major technology and platform transformation programs across all GIA pillars
• Coach and develop IT audit professionals, strengthening technical depth and elevating the practice toward best-in-class

Requirements

• Bachelor’s degree in Management Information Systems, Computer Science, Cybersecurity, Engineering, or a related field; master’s degree in a technical discipline preferred
• 10+ years of progressive experience in IT operations and infrastructure, cybersecurity, information security, technology risk, security operations, or IT audit
• Experience leading complex technology audits or security and control programs
• Experience leading cross-functional teams and directing third-party specialists
• Big 4 or comparable technology or cyber risk experience preferred
• Professional certification strongly preferred, such as CISA, CISSP, CISM, CRISC, CCSP, CGEIT, PMP, or ISACA Advanced in AI Audit (AAIA)
• English

Technologies

• MS Azure, AWS, GCP
• Model Context Protocol (MCP) servers and gateways
• Retrieval-augmented generation (RAG), agentic AI, citizen-developed tools
• COBIT
• NIST AI Risk Management Framework, NIST Cybersecurity Framework
• ISO/IEC 42001, ISO/IEC 27001
• CIS Controls, IT General Controls (ITGC), IT application controls (ITAC)
• Incident response, threat and vulnerability management, security monitoring
• Identity and access management, data protection, cloud identity, configuration management, workload protection
• Orchestration and multi-agent workflows, third-party foundation models, RAG pipelines
• AI embedded within purchased software, agent and AI inventory
• Non-human identity and entitlements, shadow AI detection
• Prompt injection and data exfiltration, RAG permission inheritance
• Human-in-the-loop checkpoints, traceability of agent actions
• Agile auditing, SOC 2

Location and Work Details

• Austin, TX (onsite)
• Full time
• Assignee / Regular
• Travel: Yes, 20% of the time
• Relocation eligible: Yes

Compensation

• USD 140,000 - 192,500 per year