Cyber & IT Audit Manager

Role Profile:

The Cyber and IT Audit Manager will oversee IT and cybersecurity audits, managing a team of auditors to assess IT processes and Operational Technology (OT) environments. The manager will ensure audits are aligned with the companys strategic objectives and regulatory requirements, with a focus on delivering value and identifying critical risks in IT and cybersecurity. This role includes responsibility for overseeing security assessments and implementing audit methodologies that support continuous improvement.

Responsibilities:

• 'Manage and execute a portfolio of IT and cybersecurity audits, focusing on complex audits related to IT general controls, cybersecurity frameworks, and OT environments.
• Oversee medium complexity security assessments for IT and OT systems, ensuring comprehensive audit coverage.
• Collaborate with the CAE, IT audit Director and IT stakeholders to build an audit pipeline, addressing emerging risks and identifying areas for process improvement.
• Lead the development of audit programs and methodologies, ensuring alignment with industry best practices and regulatory frameworks (e.g., NIST, COBIT, IEC 62443).
• Manage audit staff, providing guidance and ensuring adherence to professional standards (IIA, ITGC).
• Present audit findings to senior management, communicating risks, recommendations, and opportunities for improvement.

Qualifications:

• '7+ years of experience in IT auditing, cybersecurity, and OT systems.• Proven experience managing audits and teams, with a focus on IT governance, cybersecurity, and risk management.
• Expertise with security assessment tools (e.g., Nmap, Nessus, Kali Linux, Metasploit, Burp Suite) and audit methodologies for IT and OT systems.
• Strong understanding of industry frameworks (NIST, COBIT, ISO 27001, MITRE ATT&CK) and IEC 62443 for OT environments.
• OT knowledge and experience is highly desirable.
• Certifications such as CISSP, CISA, CISM, OSCP, OSWP, CRTP, CEH, HTB CPTS, HTB CBBH, HTB CWEE are preferred.
• Bachelors or Master’s degree in Information Technology, Cybersecurity, or related disciplines.
• Strong leadership, project management, and communication skills, with the ability to influence stakeholders at all levels.