Head, IT Audit

The Director, IT Audit provides strategic leadership for the organization’s technology audit function. This executive role oversees comprehensive risk assessments, evaluates IT governance and cybersecurity controls, ensures strict regulatory compliance, and advises executive leadership and the Audit Committee on mitigating technology risks across enterprise infrastructure, applications, and cloud environments.

- Audit Strategy & Planning: Develop and execute an annual, risk-based IT audit plan aligned with corporate business objectives, regulatory requirements, and emerging technology trends.

- Cybersecurity & Infrastructure Assessment: Direct complex audits covering network security, cloud architecture (Google/AWS), identity and access management (IAM), data privacy, and business continuity/disaster recovery.

- Governance & Compliance Frameworks: Evaluate alignment and compliance with industry frameworks including ISO 27001, NIST, COBIT, SOC 2, and applicable data privacy laws (e.g., GDPR, NDPR).

- Executive Leadership & Governance: Lead, mentor, and develop a high-performing team of IT auditors and technical specialists. Foster continuous professional development and technical proficiency.

- Reporting & Stakeholder Management: Present audit findings, comprehensive risk evaluations, and practical remediation plans directly to the Chief Audit Officer and Senior Executive Management.

- Continuous Monitoring & Analytics: Drive innovation by embedding automated audit techniques, data analytics, and continuous controls monitoring (CCM) into the overall audit lifecycle to enhance efficiency.

- 10+ years of progressive experience in IT auditing, technology risk management, or cybersecurity, including 4+ years in a senior leadership/management role.

- Bachelor’s or Master’s degree in Computer Science, Information Systems, Cybersecurity, or a related quantitative discipline.

- Certified Information Systems Auditor (CISA) required. Additional credentials such as CRISC, CISM, CISSP, or CIA are highly desirable.

- Deep technical understanding of cloud environments (Google & AWS), network infrastructure, database security, API, application controls, and IT General Controls (ITGCs).