Department: Internal Audit
Reports to: Chief Audit Officer
About this role
The Director, IT Audit provides strategic leadership for the organization’s technology audit function.
This executive role oversees comprehensive risk assessments, evaluates IT governance and cybersecurity controls, ensures strict regulatory compliance, and advises executive leadership and the Audit Committee on mitigating technology risks across enterprise infrastructure, applications, and cloud environments.
Responsibilities
Audit Strategy & Planning: Develop and execute an annual, risk-based IT audit plan aligned with corporate business objectives, regulatory requirements, and emerging technology trends.
Cybersecurity & Infrastructure Assessment: Direct complex audits covering network security, cloud architecture (Google/AWS), identity and access management (IAM), data privacy, and business continuity/disaster recovery.
Governance & Compliance Frameworks: Evaluate alignment and compliance with industry frameworks including ISO 27001, NIST, COBIT, SOC 2, and applicable data privacy laws (e.g., GDPR, NDPR).
Executive Leadership & Governance: Lead, mentor, and develop a high-performing team of IT auditors and technical specialists. Foster continuous professional development and technical proficiency.
Reporting & Stakeholder Management: Present audit findings, comprehensive risk evaluations, and practical remediation plans directly to the Chief Audit Officer and Senior Executive Management.
Continuous Monitoring & Analytics: Drive innovation by embedding automated audit techniques, data analytics, and continuous controls monitoring (CCM) into the overall audit lifecycle to enhance efficiency.
Experience & Background
Bachelor’s or Master’s degree in Computer Science, Information Systems, Cybersecurity, or a related quantitative discipline.
Certified Information Systems Auditor (CISA) required.
Additional credentials such as CRISC, CISM, CISSP, or CIA are highly desirable.
10+ years of progressive experience in IT auditing, technology risk management, or cybersecurity, including 4+ years in a senior leadership/management role.
Deep technical understanding of cloud environments (Google & AWS), network infrastructure, database security, API, application controls, and IT General Controls (ITGCs).
Skills & Competencies:
Exceptional stakeholder management, executive presence, oral and written communication, strategic problem-solving, and conflict resolution skills.
Strong proficiency in risk assessment prowess and deep thinking.
Advanced predictive & prescriptive data analytics skills.
Self-driven capacity, agility, customer obsession, professional skepticism, and urgency.
What success looks like in this role
Establishment of a robust, proactive, risk-based IT audit strategy that protects enterprise assets and cloud infrastructure.
High-performing, technically proficient IT audit team delivering clear, high-impact evaluations and actionable remediation plans.
Continuous integration of automated audit controls, analytics, and full compliance with industry regulatory standards and frameworks.
Why join us
Competitive compensation, benefits, and career growth opportunities.
Fully remote work culture and support for professional development.
They see your structured profile as it stands at the moment you apply, plus your CV if you have one attached. That snapshot is frozen - if you edit your profile next week, this application still shows what you sent today. Your salary expectation is never sent unless you choose to include it.
Yes. The match figure is for you, not for them - Moniepoint Incorporated does not see it. The apply button works the same regardless of your match percentage.
Because boards rewrite titles when they republish. All copies of this vacancy are the same job at the same employer with the same closing date. We show the employer's own wording and list the rest above so you know you have already seen it.
It appears in your application tracker straight away. Because this application is handled here rather than on an external site, you will see the status change as Moniepoint Incorporated moves it - viewed, shortlisted, interviewing or declined. Roles that redirect to an employer's own site cannot be tracked that way, and we say so on those listings.
This employer has not yet been checked against the corporate register.
Regardless of any of that, no employer on this platform may ask you for money at any stage. If this one does, report it and tell us what they asked for.