IT Audit Manager
King of Prussia, PA
Category: Auditor
Industry: Energy
Standard Hours: Open
Reference ID: JN -102026-109080
Date Posted: 10/15/2026
Shortcut: http://careers.eliassen.com/9HO60u
Description:
We are seeking an experienced IT Audit Manager to lead technology-focused internal audit activities for a large organization operating in a highly regulated environment.
This position will be responsible for assessing technology risks, evaluating the design and operating effectiveness of internal controls, leading IT audit engagements, and supporting SOX compliance initiatives.
The ideal candidate will bring a strong combination of hands-on IT audit experience, SOX ITGC expertise, technology risk management, cybersecurity controls, and audit leadership. This individual should be comfortable evaluating complex technology environments, identifying control deficiencies, developing practical remediation recommendations, and communicating findings to senior management and key stakeholders.
Salary: $125,000 - $135,000 base salary
Responsibilities:
IT Audit & Controls
- Lead risk-based IT audit engagements from planning and scoping through testing, reporting, and remediation follow-up
- Develop audit programs and testing approaches for IT processes, applications, infrastructure, and security controls
- Assess the design and operating effectiveness of IT General Controls (ITGCs) and IT Application Controls (ITACs)
- Evaluate controls related to:
- Logical access and identity management
- Change management
- IT operations
- System development
- Technology governance
SOX Compliance
- Review audit documentation, testing results, and workpapers for quality, accuracy, and completeness
- Identify control deficiencies, assess associated risks, and recommend corrective actions
- Lead and execute SOX ITGC testing supporting financial reporting requirements
- Evaluate access management, change management, IT operations, automated controls, system-generated reports, and interfaces
- Partner with IT, business process owners, compliance teams, and external auditors to support SOX requirements
- Evaluate technology controls across enterprise applications, infrastructure, and supporting systems
- Support control deficiency assessments, remediation planning, and follow-up testing
- Identify opportunities to improve SOX processes, testing efficiency, documentation, and control effectiveness
Technology Risk & Cybersecurity
- Conduct technology risk assessments across applications, infrastructure, cybersecurity, and operational resilience
- Evaluate cloud environments, security configurations, identity and access management, and vulnerability management practices
- Review controls against established frameworks including NIST, COBIT, and COSO
- Assess IT governance, SDLC, technology implementations, and change management processes
- Evaluate business continuity, disaster recovery, data protection, and incident response controls
- Assess third-party technology risks, vendor controls, and SOC reports
Leadership & Stakeholder Management
- Manage multiple IT audit engagements while maintaining timelines, quality standards, and priorities
- Provide leadership, coaching, and technical guidance to audit team members
- Partner with IT leadership, business stakeholders, risk, compliance, and other functions to identify and address technology risks
- Prepare clear audit reports outlining findings, risk exposure, root causes, and recommended corrective actions
- Present findings and recommendations to management and senior leadership
- Track outstanding audit findings and monitor remediation activities
- Identify opportunities to improve audit methodologies through automation, data analytics, and continuous improvement
Experience Requirements:
- Bachelor's degree in Accounting, Information Systems, Information Technology, Computer Science, Finance, or a related field
- 7+ years of progressive experience in IT audit, technology risk, internal audit, or IT compliance
- Experience leading IT audit engagements and overseeing audit testing
- Strong hands-on experience with SOX ITGC testing
- Experience evaluating controls related to access management, change management, and IT operations
- Experience evaluating IT Application Controls and automated controls
- Knowledge of technology risk management, cybersecurity controls, and regulatory compliance
- Experience conducting technology risk assessments and identifying control deficiencies
- Experience supporting control remediation activities
- Familiarity with internal audit and risk frameworks including COSO, COBIT, and NIST
- Strong written and verbal communication skills with experience presenting audit findings to management
- Ability to manage multiple priorities and work effectively across technical and nontechnical teams
Preferred Qualifications
- Professional certification such as CISA, CIA, CPA, or CISSP
- Public accounting, Big 4, consulting, or corporate internal audit experience
- Experience within utilities, energy, financial services, or another highly regulated industry
- Experience auditing enterprise platforms such as SAP or Oracle
- Knowledge of cloud environments including AWS, Microsoft Azure, or Google Cloud
- Experience evaluating cybersecurity programs, IT infrastructure, or major technology transformations
- Exposure to Operational Technology (OT), Industrial Control Systems (ICS), or SCADA
- Experience with audit management systems, GRC platforms, automation, or data analytics
Education Requirements:
- Bachelor's degree required.
Skills, experience, and other compensable factors will be considered when determining pay rate. The pay range provided in this posting reflects a W2 hourly rate; other employment options may be available that may result in pay outside of the provided range.
W2 employees of Eliassen Group who are regularly scheduled to work 30 or more hours per week are eligible for the following benefits: medical (choice of 3 plans), dental, vision, pre-tax accounts, other voluntary benefits including life and disability insurance, 401(k) with match, and sick time if required by law in the worked-in state/locality.
If anyone reaches out to you about an open position connected with Eliassen Group, please ensure that you are working directly with us by confirming the following:
· When you work with Eliassen Group, all email communication will come from an Eliassen.com address, never Gmail, Yahoo, etc.
· Eliassen Group will never ask you for personal information (home address, bank account, or check routing number) until you have worked with someone clearly associated with Eliassen Group.
If you have any indication of fraudulent activity, please contact fraud@eliassen.com.
-
Sr Associate - Asset Projection, Data Controls, & Governance
Anywhere
Description: We are seeking a Senior Associate – Data Controls & Governance to support the evaluation and enhancement of controls surrounding financial and asset projection data. This individual will assess how data is sourced, transformed, stored, gov...
Date Posted: 10/15/2026 Recommended
-
SOX Business Process Controls Senior Manager (Non-Order-to-Cash)
San Francisco, CA
Description: Location: San Francisco, CA (Hybrid - 4 days onsite per week) Our client is seeking a seasoned leader to drive and strengthen its SOX compliance and business process controls program, with a focus on key operational and financial cycles (N...
Date Posted: 10/20/2026 Recommended
-
IT Risk & Controls Auditor – Digital Asset
Anywhere
Description:Remote Our client seeks a technology risk and controls professional to support the Digital Assets team by providing audit and assurance support across current and upcoming digital asset engagements. The role requires knowledge of controls s...
Date Posted: 10/15/2026 Recommended
-
Internal Audit Senior Manager (Direct Hire)
King of Prussia, PA
Description: On-site in King of Prussia, PA Our client is seeking an experienced Internal Audit Senior Manager to lead complex audit engagements, strengthen internal controls, and support enterprise risk management initiatives. This role will partner w...
Date Posted: 10/15/2026 Recommended
-
Security Engineer
Anywhere
Description: Remote in either Cincinnati, OH Our client seeks a Senior Security Engineer to support the vulnerability management lifecycle. The role will maintain and operate scanning capabilities, analyze findings, develop remediation guidance, and co...
Date Posted: 10/08/2026 Recommended
-
Senior Internal Auditor
King of Prussia, PA
Description: On-site in King of Prussia, PA Our client seeks a professional Senior Internal Auditor to join their team in King of Prussia, PA. The Senior Auditor executes internal audits and supports enterprise-wide SOX compliance to strengthen interna...
Date Posted: 10/15/2026 Recommended
-
IT Audit Manager
Anywhere
Description: Remote Our client seeks an IT Audit Manager to support SOX testing for a client engagement. The consultant will plan, execute, and report on ITGC and application control testing, coordinate with stakeholders, and support remediation activi...
Date Posted: 10/11/2026 Recommended
-
Senior Cyber Risk Analyst
Pittsburgh, PA
Description:Hybrid 4 days onsite in Pittsburgh, PA Our client seeks a Cyber Risk professional with strong Identity & Access Management experience to identify, analyze, and remediate cyber and control-related risks across a large enterprise. The role wi...
Date Posted: 10/15/2026 Recommended
-
IT Audit Controls/SOX - Senior Manager
San Francisco, CA
Description: Our client seeks an IT Audit Controls/SOX - Senior Manager to lead comprehensive internal audit services across industries. The role focuses on enhancing the credibility and reliability of financial statements and internal controls, enabli...
Date Posted: 10/20/2026 Recommended
-
IT Audit Controls/SOX Manager
San Francisco, CA
Description: Hybrid 4x / week on-site in San Francisco, CA Our client seeks an IT Audit Controls/SOX Manager to deliver internal audit services across industries. The role focuses on optimizing internal audit functions, leveraging AI and risk technolog...
Date Posted: 10/20/2026 Recommended
-
Information Technology Risk & Controls Auditor
Charlotte, NC
Description: Our client seeks an Information Technology Risk & Controls Auditor to work with clients and engagement teams to assess the design and operating effectiveness of controls related to financial reporting, compliance, and information technolog...
Date Posted: 10/15/2026 Recommended
-
SOX Business Process Controls Manager (Order to Cash)
San Francisco, CA
Description: Location: San Francisco, CA (Hybrid - 4 days onsite per week) Our client is seeking a SOX Business Process Controls Manager to lead Sarbanes-Oxley (SOX) compliance, internal audit, and business process controls initiatives within a dynamic...
Date Posted: 10/20/2026 Recommended
-
Senior Cyber Risk Analyst
Pittsburgh, PA
Description: Hybrid 4 days onsite in Pittsburgh, PA Our client seeks a Cyber Risk professional with strong Identity & Access Management expertise and proven project coordination. The role partners with senior leadership to identify, track, analyze, and...
Date Posted: 10/15/2026 Recommended
-
Remote Software Asset Management (SAM) Analyst – SBOM
Anywhere
Description: We are seeking a Software Asset Management (SAM) Analyst – SBOM & Open Source Compliance to join our Software Asset Management team. This role will be responsible for supporting and advancing our Software Bill of Materials (SBOM) program, ...
Date Posted: 10/04/2026 Recommended
-
Azure Cloud Security and Databricks Consultant
Anywhere
Description: Remote but King of Prussia, PA or Milwaukee, WI preferred Our client seeks a security-focused Azure and Databricks specialist to support cloud migration and hardening activities associated with a transition services agreement. The consulta...
Date Posted: 10/15/2026 Recommended
-
Senior Cybersecurity GRC Analyst
King of Prussia, PA
Description: On-site in either King of Prussia, PA or Denver, PA Our client is seeking a Senior Cybersecurity Governance, Risk & Compliance (GRC) Analyst to support cybersecurity governance, regulatory compliance, and risk management initiatives within...
Date Posted: 10/05/2026 Recommended
-
Senior Software Engineer
Gaithersburg, MD
Description: Our client seeks multiple Software Development resources to build and maintain Java-centric, cloud-native services within a secure, regulated environment. The team delivers containerized microservices on AWS using ECS, EKS, and OpenShift, ...
Date Posted: 10/26/2026 Recommended
-
Senior Cloud DevOps Engineer II
Washington, DC
Description: Hybrid 2 in office 3 days remote in Washington, DC Our client seeks a Senior Cloud DevOps Engineer II to administer, integrate, standardize, and support enterprise DevSecOps platforms. The role focuses on bringing existing and shadow IT to...
Date Posted: 10/27/2026 Recommended
-
PAM Engineer
Cary, NC
Description: Hybrid in Cary, NC Our client seeks a Privileged Access Management (PAM) Engineer to strengthen privileged access security across cloud, on-premises, and hybrid environments. You will engineer and support PAM solutions, reduce privileged a...
Date Posted: 10/21/2026 Recommended
-
Director, Security Architecture & Engagement
Burbank, CA
Description: Hybrid 4 days onsite in Burbank, CA Our client seeks a Director, Security Architecture & Engagement to act as a strategic cybersecurity advisor and trusted partner for business, product, engineering, and technology leaders. The director wi...
Date Posted: 10/08/2026 Recommended
-
Senior Data Engineer
Anywhere
Description: Remote Our client seeks a Senior Data Engineer to own the governed transformation layer end-to-end. The role will design and build Snowflake transformation layers, migrate legacy SQL views and user-maintained dimensions into versioned, tes...
Date Posted: 10/20/2026 Recommended
-
Business System Analyst (Governance)
Anywhere
Description: Remote Our client seeks an analytical technical expert and trusted advisor for enterprise systems, enterprise integration, and technology governance. The role will partner with Enterprise Architecture, Engineering, Infrastructure, Security...
Date Posted: 10/13/2026 Recommended
-
Sr. Security Engineer (Trellix)
Washington dc, DC
Description: On-site in Washington, DC As a Sr. Security Engineer (Trellix), you will serve as the technical lead for our client's endpoint security and data protection ecosystem. You will balance day-to-day operational support with strategic cybersecu...
Date Posted: 10/24/2026 Recommended
-
Data Risk Manager
Richmond, VA
Description:Hybrid Onsite 3 days a week in Richmond, VA Our client seeks a Data Risk Manager to support large scale business and technology integration within the US Card domain. The role will assess data risks across data flows and downstream consumpt...
Date Posted: 10/05/2026 Recommended
-
Cybersecurity Architect
Orange, CA
Description: On-site in Orange, CA Our client has an opportunity for a Cybersecurity Architect supporting the Orange County Sheriff’s Department in Santa Ana, CA. The role provides technical leadership to design, develop, and implement enterprise secur...
Date Posted: 10/20/2026 Recommended
-
Senior IT Project Manager
Charlotte, NC
Description: Hybrid 3 days on-site in Charlotte, NC Our client seeks a Senior IT Project Manager to lead complex software and cybersecurity initiatives across the SDLC. The role will manage scope, schedule, cost, and risk while coordinating delivery te...
Date Posted: 10/13/2026 Recommended
-
Lead Agilist
Cincinnati, OH
Description: On-site in Cincinnati, OH Our client seeks a Lead Agilist to coach and facilitate Agile Squads within Commercial IT. The role shall foster adoption of Agile and Scrum values, enable high-performing teams, and drive delivery of business val...
Date Posted: 10/17/2026 Recommended
-
Cost Accountant
Anywhere
Description: Remote Our client seeks a Cost Accountant to support inventory accounting, cost analysis, and month-end close activities. The role will maintain cost accounting processes, partner with cross-functional teams, and drive accurate inventory v...
Date Posted: 10/12/2026 Recommended
-
Data Scientist
Anywhere
Description: Remote (west coast hours) Our client, an industry leader in banking and financial services, has an excellent contract opportunity for a Data Scientist working remote on PST. The role designs, develops, and implements analytical, statistica...
Date Posted: 10/26/2026 Recommended
-
Software Engineer in Test II
Anywhere
Description: Remote Our client is seeking a Software Engineer in Test II to support Consumer Technology initiatives that enhance member and customer outcomes. The role requires designing, developing, maintaining, and troubleshooting software applicatio...
Date Posted: 10/18/2026 Recommended
Eliassen Group is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status, or disability status. Eliassen Group’s Affirmative Action Plan (AAP) is available for inspection by any employee or applicant for employment upon request, during normal business hours of Monday through Friday, 8:30am to 5:30pm EST. Interested persons should contact Phaedra Wells at pwells@eliassen.com for assistance. It is unlawful in Massachusetts and Maryland to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.
Applicants with disabilities that believe they require an accommodation or assistance with a position, please email our HR team at hradmin@eliassen.com. This email inbox is designed exclusively to assist job seekers whose disability prevents them from being able to apply online. Emails sent for other purposes will not receive a response.
Please be advised that a number of fraudulent job postings have been released under the Eliassen Group brand.
Unfortunately, fraudulent job postings can happen. If anyone reaches out to you about an open position connected with Eliassen Group, never provide personal or financial information to anyone who is not clearly associated with Eliassen Group
If anyone seemingly from Eliassen Group has ever requested this personal information in the past or does so in the future, please contact fraud@eliassen.com.
Please ensure that you are working directly with us by confirming the following:
- When you work with Eliassen Group, all email communication will come from an Eliassen.com address, never Gmail, Yahoo, etc.
- Eliassen Group will never ask you for personal information (home address, bank account, or check routing number) until you have worked with someone clearly associated with Eliassen Group, as indicated above