IT Audit Manager
King of Prussia, PA
Category: Auditor
Industry: Energy
Standard Hours: Open
Reference ID: JN -102026-109080
Date Posted: 10/15/2026
Shortcut: http://careers.eliassen.com/9HO60u
Description:
We are seeking an experienced IT Audit Manager to lead technology-focused internal audit activities for a large organization operating in a highly regulated environment.
This position will be responsible for assessing technology risks, evaluating the design and operating effectiveness of internal controls, leading IT audit engagements, and supporting SOX compliance initiatives.
The ideal candidate will bring a strong combination of hands-on IT audit experience, SOX ITGC expertise, technology risk management, cybersecurity controls, and audit leadership. This individual should be comfortable evaluating complex technology environments, identifying control deficiencies, developing practical remediation recommendations, and communicating findings to senior management and key stakeholders.
Salary: $125,000 - $135,000 base salary
Responsibilities:
IT Audit & Controls
- Lead risk-based IT audit engagements from planning and scoping through testing, reporting, and remediation follow-up
- Develop audit programs and testing approaches for IT processes, applications, infrastructure, and security controls
- Assess the design and operating effectiveness of IT General Controls (ITGCs) and IT Application Controls (ITACs)
- Evaluate controls related to:
- Logical access and identity management
- Change management
- IT operations
- System development
- Technology governance
SOX Compliance
- Review audit documentation, testing results, and workpapers for quality, accuracy, and completeness
- Identify control deficiencies, assess associated risks, and recommend corrective actions
- Lead and execute SOX ITGC testing supporting financial reporting requirements
- Evaluate access management, change management, IT operations, automated controls, system-generated reports, and interfaces
- Partner with IT, business process owners, compliance teams, and external auditors to support SOX requirements
- Evaluate technology controls across enterprise applications, infrastructure, and supporting systems
- Support control deficiency assessments, remediation planning, and follow-up testing
- Identify opportunities to improve SOX processes, testing efficiency, documentation, and control effectiveness
Technology Risk & Cybersecurity
- Conduct technology risk assessments across applications, infrastructure, cybersecurity, and operational resilience
- Evaluate cloud environments, security configurations, identity and access management, and vulnerability management practices
- Review controls against established frameworks including NIST, COBIT, and COSO
- Assess IT governance, SDLC, technology implementations, and change management processes
- Evaluate business continuity, disaster recovery, data protection, and incident response controls
- Assess third-party technology risks, vendor controls, and SOC reports
Leadership & Stakeholder Management
- Manage multiple IT audit engagements while maintaining timelines, quality standards, and priorities
- Provide leadership, coaching, and technical guidance to audit team members
- Partner with IT leadership, business stakeholders, risk, compliance, and other functions to identify and address technology risks
- Prepare clear audit reports outlining findings, risk exposure, root causes, and recommended corrective actions
- Present findings and recommendations to management and senior leadership
- Track outstanding audit findings and monitor remediation activities
- Identify opportunities to improve audit methodologies through automation, data analytics, and continuous improvement
Experience Requirements:
- Bachelor's degree in Accounting, Information Systems, Information Technology, Computer Science, Finance, or a related field
- 7+ years of progressive experience in IT audit, technology risk, internal audit, or IT compliance
- Experience leading IT audit engagements and overseeing audit testing
- Strong hands-on experience with SOX ITGC testing
- Experience evaluating controls related to access management, change management, and IT operations
- Experience evaluating IT Application Controls and automated controls
- Knowledge of technology risk management, cybersecurity controls, and regulatory compliance
- Experience conducting technology risk assessments and identifying control deficiencies
- Experience supporting control remediation activities
- Familiarity with internal audit and risk frameworks including COSO, COBIT, and NIST
- Strong written and verbal communication skills with experience presenting audit findings to management
- Ability to manage multiple priorities and work effectively across technical and nontechnical teams
Preferred Qualifications
- Professional certification such as CISA, CIA, CPA, or CISSP
- Public accounting, Big 4, consulting, or corporate internal audit experience
- Experience within utilities, energy, financial services, or another highly regulated industry
- Experience auditing enterprise platforms such as SAP or Oracle
- Knowledge of cloud environments including AWS, Microsoft Azure, or Google Cloud
- Experience evaluating cybersecurity programs, IT infrastructure, or major technology transformations
- Exposure to Operational Technology (OT), Industrial Control Systems (ICS), or SCADA
- Experience with audit management systems, GRC platforms, automation, or data analytics
Education Requirements:
- Bachelor's degree required.
Skills, experience, and other compensable factors will be considered when determining pay rate. The pay range provided in this posting reflects a W2 hourly rate; other employment options may be available that may result in pay outside of the provided range.
W2 employees of Eliassen Group who are regularly scheduled to work 30 or more hours per week are eligible for the following benefits: medical (choice of 3 plans), dental, vision, pre-tax accounts, other voluntary benefits including life and disability insurance, 401(k) with match, and sick time if required by law in the worked-in state/locality.
If anyone reaches out to you about an open position connected with Eliassen Group, please ensure that you are working directly with us by confirming the following:
· When you work with Eliassen Group, all email communication will come from an Eliassen.com address, never Gmail, Yahoo, etc.
· Eliassen Group will never ask you for personal information (home address, bank account, or check routing number) until you have worked with someone clearly associated with Eliassen Group.
If you have any indication of fraudulent activity, please contact fraud@eliassen.com.
-
Risk and Controls Lead
Pittsburgh, PA
Description: On-site 4 days/week in Pittsburgh, PA Our client is a global financial services institution that provides a broad range of banking, investment, asset servicing, wealth management, treasury, and market infrastructure solutions to clients ar...
Date Posted: 10/12/2026 Recommended
-
Sr Associate - Asset Projection, Data Controls, & Governance
Anywhere
Description: We are seeking a Senior Associate – Data Controls & Governance to support the evaluation and enhancement of controls surrounding financial and asset projection data. This individual will assess how data is sourced, transformed, stored, gov...
Date Posted: 10/15/2026 Recommended
-
SOX Business Process Controls Senior Manager (Non-Order-to-Cash)
San Francisco, CA
Description: Location: San Francisco, CA (Hybrid - 4 days onsite per week) Our client is seeking a seasoned leader to drive and strengthen its SOX compliance and business process controls program, with a focus on key operational and financial cycles (N...
Date Posted: 09/20/2026 Recommended
-
IT Audit Controls/SOX Manager
San Francisco, CA
Description: We are looking for a professional who combines strong IT SOX and IT audit expertise with hands-on experience evaluating application controls, automated controls, and technology risks within large-scale, highly complex environments. Candida...
Date Posted: 09/20/2026 Recommended
-
IT Risk & Controls Auditor – Digital Asset
Anywhere
Description:Remote Our client seeks a technology risk and controls professional to support the Digital Assets team by providing audit and assurance support across current and upcoming digital asset engagements. The role requires knowledge of controls s...
Date Posted: 10/15/2026 Recommended
-
UGI Corporation - Internal Audit Senior Manager
King of Prussia, PA
Description: On-site in King of Prussia, PA Our client is seeking an experienced Internal Audit Manager to lead complex audit engagements, strengthen internal controls, and support enterprise risk management initiatives. This role will partner with bus...
Date Posted: 10/15/2026 Recommended
-
Security Engineer
Anywhere
Description: Remote in either Cincinnati, OH Our client seeks a Senior Security Engineer to support the vulnerability management lifecycle. The role will maintain and operate scanning capabilities, analyze findings, develop remediation guidance, and co...
Date Posted: 10/08/2026 Recommended
-
IT Audit Manager
Anywhere
Description: Remote Our client seeks an IT Audit Manager to support SOX testing for a client engagement. The consultant will plan, execute, and report on ITGC and application control testing, coordinate with stakeholders, and support remediation activi...
Date Posted: 10/11/2026 Recommended
-
SOX Business Process Controls - Senior Manager
San Francisco, CA
Description: Hybrid 4x / week on-site in San Francisco, CA Our client seeks a SOX Business Process Controls - Senior Manager with Order-to-Cash controls design and remediation expertise. The role delivers internal audit services across industries, leve...
Date Posted: 09/20/2026 Recommended
-
IT Audit Controls/SOX - Senior Manager
San Francisco, CA
Description: Our client seeks an IT Audit Controls/SOX - Senior Manager to lead comprehensive internal audit services across industries. The role focuses on enhancing the credibility and reliability of financial statements and internal controls, enabli...
Date Posted: 09/20/2026 Recommended
-
IT Audit Controls/SOX Manager
San Francisco, CA
Description: Hybrid 4x / week on-site in San Francisco, CA Our client seeks an IT Audit Controls/SOX Manager to deliver internal audit services across industries. The role focuses on optimizing internal audit functions, leveraging AI and risk technolog...
Date Posted: 09/20/2026 Recommended
-
Information Technology Risk & Controls Auditor
Charlotte, NC
Description: Our client seeks an Information Technology Risk & Controls Auditor to work with clients and engagement teams to assess the design and operating effectiveness of controls related to financial reporting, compliance, and information technolog...
Date Posted: 10/15/2026 Recommended
-
SOX Business Process Controls Manager (Order to Cash)
San Francisco, CA
Description: Location: San Francisco, CA (Hybrid - 4 days onsite per week) Our client is seeking a SOX Business Process Controls Manager to lead Sarbanes-Oxley (SOX) compliance, internal audit, and business process controls initiatives within a dynamic...
Date Posted: 09/20/2026 Recommended
-
Remote Software Asset Management (SAM) Analyst – SBOM
Anywhere
Description: We are seeking a Software Asset Management (SAM) Analyst – SBOM & Open Source Compliance to join our Software Asset Management team. This role will be responsible for supporting and advancing our Software Bill of Materials (SBOM) program, ...
Date Posted: 10/04/2026 Recommended
-
Senior Cybersecurity GRC Analyst
King of Prussia, PA
Description: On-site in either King of Prussia, PA or Denver, PA Our client is seeking a Senior Cybersecurity Governance, Risk & Compliance (GRC) Analyst to support cybersecurity governance, regulatory compliance, and risk management initiatives within...
Date Posted: 10/05/2026 Recommended
-
Internal Audit/SOX - Director
San Francisco, CA
Description: Our client seeks an Internal Audit/SOX Director to lead independent and objective assessments of financial statements and internal controls across diverse industries. The role will set strategic direction, build and optimize internal audit...
Date Posted: 09/20/2026 Recommended
-
Information Security Analyst - Exposure Management Lead
Cincinnati, OH
Description: On-site in Cincinnati, OH Our client seeks a Lead, Exposure Management to coordinate urgent cybersecurity exposure events. The role will manage day-to-day response activities, assess enterprise exposure, coordinate stakeholders, track reme...
Date Posted: 09/24/2026 Recommended
-
Data Protection Analyst
Boston, MA
Description: Hybrid 3 days onsite in Boston, MA Our client seeks a Sr. Analyst, Data Protection to help define strategy, design policies, partner with stakeholders, analyze risks and metrics, and advance an enterprise Data Protection Program. You will ...
Date Posted: 09/22/2026 Recommended
-
Director, Security Architecture & Engagement
Burbank, CA
Description: Hybrid 4 days onsite in Burbank, CA Our client seeks a Director, Security Architecture & Engagement to act as a strategic cybersecurity advisor and trusted partner for business, product, engineering, and technology leaders. The director wi...
Date Posted: 10/08/2026 Recommended
-
Project Manager – Salesforce CRM Integration
Irvine, CA
Description: On-site in Irvine, CA Our client seeks a seasoned Project Manager to lead a Salesforce CRM integration following an acquisition. The role will drive consolidation of multiple Salesforce orgs, harmonize business processes, and manage comple...
Date Posted: 09/17/2026 Recommended
-
Business System Analyst (Governance)
Anywhere
Description: Remote Our client seeks an analytical technical expert and trusted advisor for enterprise systems, enterprise integration, and technology governance. The role will partner with Enterprise Architecture, Engineering, Infrastructure, Security...
Date Posted: 10/13/2026 Recommended
-
Sr. Security Engineer (Trellix)
Washington dc, DC
Description: On-site in Washington, DC As a Sr. Security Engineer (Trellix), you will serve as the technical lead for our client's endpoint security and data protection ecosystem. You will balance day-to-day operational support with strategic cybersecu...
Date Posted: 09/24/2026 Recommended
-
Data Risk Manager
Richmond, VA
Description:Hybrid Onsite 3 days a week in Richmond, VA Our client seeks a Data Risk Manager to support large scale business and technology integration within the US Card domain. The role will assess data risks across data flows and downstream consumpt...
Date Posted: 10/05/2026 Recommended
-
Senior Cybersecurity Engineer
Cary, NC
Description: Hybrid Three days onsite per week. Tuesday – Thurday in Cary, NC Our client seeks a Senior Cybersecurity Engineer who will operate as a trusted technical advisor and hands-on engineer across network, cloud, and Zero Trust security domains....
Date Posted: 09/21/2026 Recommended
-
Senior IT Project Manager
Charlotte, NC
Description: Hybrid 3 days on-site in Charlotte, NC Our client seeks a Senior IT Project Manager to lead complex software and cybersecurity initiatives across the SDLC. The role will manage scope, schedule, cost, and risk while coordinating delivery te...
Date Posted: 10/13/2026 Recommended
-
Identity Security Engineer
Cary, NC
Description: Hybrid in Cary, NC Our client seeks an Identity Security Engineer to strengthen identity security and reduce privileged access risk across cloud, on-premises, and hybrid environments. You will engineer and support IAM and PAM solutions, ad...
Date Posted: 09/21/2026 Recommended
-
Application Analyst
St. Petersburg, FL
Description: Hybrid 3 on in St. Petersburg, FL Our client seeks an Application Analyst to coordinate Enterprise Asset Management release readiness, deployment planning, implementation activities, communications, validation tracking, and post-release fo...
Date Posted: 09/16/2026 Recommended
-
Cost Accountant
Anywhere
Description: Remote Our client seeks a Cost Accountant to support inventory accounting, cost analysis, and month-end close activities. The role will maintain cost accounting processes, partner with cross-functional teams, and drive accurate inventory v...
Date Posted: 10/12/2026 Recommended
-
QA Practice Lead
Washington, DC
Description: Hybrid 3 days onsite in Washington, DC Our client seeks a QA Practice Lead to stand up and run a transversal QA Practice across an enterprise IT roadmap. The lead will operationalize governance and frameworks, mature toolchains, coach team...
Date Posted: 09/16/2026 Recommended
-
SailPoint IIQ Developer
Pittsburgh, PA
Description: Hybrid 4 days onsite in Pittsburgh, PA Our client seeks experienced SailPoint IdentityIQ developers to build and enhance enterprise IAM capabilities at scale. You will design and implement workflows, custom plugins, rules, and API integrat...
Date Posted: 10/06/2026 Recommended
Eliassen Group is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status, or disability status. Eliassen Group’s Affirmative Action Plan (AAP) is available for inspection by any employee or applicant for employment upon request, during normal business hours of Monday through Friday, 8:30am to 5:30pm EST. Interested persons should contact Phaedra Wells at pwells@eliassen.com for assistance. It is unlawful in Massachusetts and Maryland to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.
Applicants with disabilities that believe they require an accommodation or assistance with a position, please email our HR team at hradmin@eliassen.com. This email inbox is designed exclusively to assist job seekers whose disability prevents them from being able to apply online. Emails sent for other purposes will not receive a response.
Please be advised that a number of fraudulent job postings have been released under the Eliassen Group brand.
Unfortunately, fraudulent job postings can happen. If anyone reaches out to you about an open position connected with Eliassen Group, never provide personal or financial information to anyone who is not clearly associated with Eliassen Group
If anyone seemingly from Eliassen Group has ever requested this personal information in the past or does so in the future, please contact fraud@eliassen.com.
Please ensure that you are working directly with us by confirming the following:
- When you work with Eliassen Group, all email communication will come from an Eliassen.com address, never Gmail, Yahoo, etc.
- Eliassen Group will never ask you for personal information (home address, bank account, or check routing number) until you have worked with someone clearly associated with Eliassen Group, as indicated above