Manager, Internal Audit (IT and Information Security)

About the role

We are seeking a seasoned Manager to lead risk‑based IT and Information Security audit engagements. The role involves overseeing the assessment of cybersecurity governance, security controls and information security frameworks across the organization.

Key responsibilities

• Plan, execute and report on IT and InfoSec audit projects, covering infrastructure, cloud environments, networks, databases and critical applications.
• Review IT General Controls, application controls, identity and access management, change management and disaster recovery processes.
• Evaluate compliance with regulatory requirements, industry standards and internal policies.
• Identify control deficiencies, assess associated risks and recommend practical remediation actions.
• Prepare and present audit findings to senior management and relevant committees, and monitor remediation plans.
• Manage, mentor and develop audit team members to ensure high‑quality, timely delivery of engagements.

Required profile

• Bachelor’s degree in Information Systems, Computer Science, Cybersecurity or a related discipline.
• Significant experience in IT Audit, Information Security Audit, IT Risk Management or Cybersecurity Assurance.
• Professional certifications such as CISA (preferred), CISM, CISSP, CRISC or CIA with an IT focus.
• Strong knowledge of cybersecurity frameworks, IT governance, cloud technologies and regulatory compliance.

Required skills

• IT General Controls (ITGCs)
• Identity and Access Management (IAM)
• Change Management
• Disaster Recovery planning
• Cybersecurity frameworks (e.g., NIST, ISO 27001)