IT Audit Manager

Overview IES Holdings is seeking a hands-on, technically skilled and strategically minded IT Audit Manager to fill a newly created role within our Internal Audit team. This position will manage day-to-day IT audit activities, including managing IT resources, executing risk-based IT SOX testing, performing internal audits, and leading audit automation and data and analytics initiatives. Responsibilities SOX IT Controls Program: Manage the annual SOX IT scoping process, including identification of in-scope systems, key reports, and IT dependencies supporting financial reporting. Lead walkthroughs, test of design (TOD), and test of effectiveness (TOE) for SOX IT general controls and application controls. Coordinate with external auditors on IT SOX reliance strategy, integrated audit approach, and PBC deliverables. Track and report on IT control deficiencies. Advise on control design for new or significantly changed systems and processes impacting financial reporting. Drive automation of repeatable SOX testing processes to reduce manual effort and reliance on business stakeholders for data. IT Audit Planning and Execution: Develop and maintain a disciplined, risk-based IT audit scope, ensuring audit resources are focused on high-priority risk areas. Plan, lead, and execute risk-based IT internal audits, including operational IT audits, cybersecurity reviews, NIST assessments, and other non-SOX IT audit engagements. Communicate audit results, risk ratings, and remediation recommendations clearly to IT and business leadership. Data Analytics and Audit Automation: Champion the adoption of audit automation, RPA, and AI-assisted techniques within Internal Audit. Partner with IT and business intelligence teams to ensure the audit function has access to data in usable formats, reducing dependency on the business for evidence gathering. Develop automated scripts and workflows to test large user access datasets, configuration parameters, and system logs. Build repeatable analytics solutions that increase audit coverage across ERP and ancillary systems. Serve as the team\'s subject matter expert on data-driven audit methodologies. Technology Risk Advisory and Stakeholder Management: Partner with IT, Cybersecurity, and Compliance teams to identify emerging technology risks and align audit coverage accordingly. Provide advisory input on major technology initiatives, system implementations, and digital transformation projects. Monitor the technology risk landscape and adjust the audit plan proactively. Collaborate with the broader Internal Audit team on integrated audits spanning IT and business/operational risk areas. Team and Engagement Leadership: Direct and manage IT audit resources on a day-to-day basis. Contribute to the development of the annual IT audit plan and departmental strategic initiatives. Support future recruitment and onboarding of IT audit talent as the function grows; help build a high-performing, technology-forward audit team. Requirements Bachelor\'s degree in Information Systems, Computer Science, Accounting/Finance, or related field 5+ years of current, hands-on IT audit experience Deep knowledge of IT general controls (ITGCs), IT application controls, and ITGC/SOX frameworks Experience performing a broad range of IT internal audits beyond SOX, including operational IT audits, cybersecurity reviews, and NIST assessments Hands-on SOX IT controls experience, including coordination with external auditors Demonstrated experience with data analytics tools Proven track record driving audit automation or continuous monitoring initiatives Solid understanding of cybersecurity concepts, network architecture, and access management Strong knowledge of regulatory standards including COBIT, NIST, COSO, and IIA Excellent communication skills with the ability to explain technical risks to non-technical audiences Preferred CISA (Certified Information Systems Auditor) — strongly preferred Experience in manufacturing, construction, or other industrial industry environments Familiarity with Microsoft Dynamics Proficiency in Python or SQL for large-scale data testing and automation scripts Knowledge of emerging technologies: AI/ML governance, robotic process automation (RPA), data lakes Company Overview IES is a national provider of industrial products and infrastructure services to a variety of end markets, including electrical, mechanical and communications contracting solutions for the commercial, industrial, residential and renewable energy markets. IES is publicly traded on NASDAQ under the symbol IESC. As of the end of IES\'s 2025 fiscal year ending September 30, 2025, IES produced over $3.3 billion in revenue and employed over 10,200 employees at over 174 domestic locations across the United States. Employee Benefits (selected) Safety is Priority One Competitive Pay Company 401K plan with Employer Contribution Match Company Paid Time Off Company Paid Life Insurance Choice of Medical Coverage including Prescription and Short Term Disability Plans Choice of Dental and Vision Coverage Optional Long-term Disability, Critical Illness, Accident, Legal and Pet Coverage Auto and Home Insurance Discount Programs Important Notices PLEASE NO AGENCY CALLS. NOTE TO ALL AGENCIES: Any unsolicited agency resumes or agency represented candidates presented to IES without a signed contract between the agency and IES Talent Acquisition will become the property of IES and no fees will be paid. EEO & Affirmative Action: IES is an Equal Employment Opportunity and Affirmative Action employer. We prohibit discrimination based on race, color, religion, national origin, sex, age, gender identity, sexual orientation, disability, protected veteran status, or any other protected status. IES is committed to affirmative steps to promote employment of minorities, women, individuals with disabilities, and protected veterans. We provide reasonable accommodation for applicants in accordance with applicable law. For rights statements and accommodations, contact IES or visit the appropriate government resources. #J-18808-Ljbffr