Senior Manager, Internal Audit - Technology, AI, Security and Privacy Audit

Senior Manager, Technology Audit

We are seeking a highly motivated and experienced Senior Manager of Technology Audit to join our team. This role is crucial in leading and executing complex technology audits across Intuit's diverse product and platform ecosystem. You will play a key role in providing assurance over Intuit's technology risks, cloud environments, data privacy, and emerging technologies such as AI.

This role requires a strong understanding of technology risk management, internal controls, and audit methodologies within a fast-paced, agile technology environment. You will be responsible for leading teams, managing stakeholder relationships, and driving impactful audit results.

Responsibilities

• Audit Leadership & Execution: Lead and manage end-to-end technology audit engagements, including annual planning, risk assessment, scoping, execution, and reporting. Ensure audit work is executed effectively, efficiently, and in accordance with IA methodologies and professional standards.
• Technology Risk Focus: Develop and execute audit programs focused on high-risk technology areas, including cloud computing (AWS, GCP, etc.), cybersecurity, data governance and privacy (GDPR, CCPA), DevOps, CI/CD pipelines, and emerging technologies (AI/ML).
• Team Management & Development: Manage and mentor a team of technology audit professionals. Provide coaching, performance feedback, and technical guidance to foster a high-performing and engaged team.
• Stakeholder Engagement: Build and maintain strong working relationships with key technology, product, security, and engineering leaders across Intuit. Effectively communicate audit findings, recommendations, and risk insights to senior management.
• Advisory Role: Serve as a trusted advisor to technology business partners, providing proactive control recommendations and insight on system implementations, process changes, and strategic initiatives.
• Continuous Improvement: Drive innovation and process improvement within the IA function by identifying and implementing new audit tools, techniques (e.g., AI, data analytics, automation), and methodologies to enhance audit efficiency and coverage.
• Reporting: Prepare high-quality, concise audit reports and present results to management and the Audit Committee.
• Integrated Audit Expertise: Act as the primary technology expert and advisor for integrated audits (IT/Product/Financial), ensuring proper scoping, control reliance, and effective testing of end to end controls with expertise in in-house product development with microservices and serverless architecture Technology Stack.
• Remediation Management: Ensure timely and effective resolution of identified issues, track progress, and verify that corrective actions prevent recurrence. Advise and oversee the building of complex management action plans.

Qualifications

• Education: Bachelor's degree in Information Technology, Computer Science, or a related field. Master's degree preferred.
• Experience: 12+ years of progressive experience in technology audit, risk management, with at least 3+ years in a senior management or leadership role, preferably within the technology or financial services industry.
• Domain Expertise: Deep technical knowledge and experience auditing complex cloud environments (e.g., AWS, GCP, Azure), modern software development practices (Agile, DevOps, CI/CD), network security, and operating systems. AI knowledge and experience in AI audits are highly preferable.
• AI Exposure: Ability to drive digital transformation in audit by leading teams in deploying automation including agentic AI and RPA, transitioning the function from sample-based checks to AI-enabled predictive insight, extremely valuable.
• Certifications: Professional certifications desired (e.g., CISA, CISSP, CISM). Additional certifications such as AWS/Azure/GCP Cloud certifications are a significant plus.
• Audit/Risk Frameworks: Strong working knowledge of technology risk and control frameworks (e.g., COBIT, NIST, ISO 27001) and regulatory requirements (e.g., SOX, GDPR, CCPA).
• Communication & Influence: Excellent verbal and written communication skills with the ability to articulate complex technical issues and risks to both technical and non-technical audiences. Proven ability to influence change.
• Leadership: Demonstrated leadership skills in building, coaching, and mentoring high-performing teams in a dynamic, rapidly changing environment.