Cybersecurity IT Audit Manager

Overview CBRE’s Internal Audit (IA) is an independent, solution-focused business partner that provides insight to protect CBRE's brand and drive positive change. IA provides objective assurance and guidance to help CBRE leaders across our global enterprise identify, communicate and mitigate risk exposure that could threaten our company's ability to achieve strategic objectives. This team helps CBRE reach business and functional goals by identifying opportunities for improvement. IA is an early adopter of agile auditing and utilizes agile to serve our clients in the most efficient/effective manner possible. The Internal Audit Manager leads audit engagements on CBRE’s Enterprise Risks as an engaged scrum team member. This role will have the primary responsibilities of understanding business processes, assessing risks to business objectives, evaluating control effectiveness and delivering insights to stakeholders and senior leadership. The IT Audit Manager will possess operational internal audit experience, an interest in cybersecurity, data analytics, Artificial Intelligence, strong communication skills and advanced critical thinking. What You'll Do Lead audit and project work to evaluate key risks and the adequacy of controls within CBRE’s global business units and key business processes. Contribute to the development of an audit approach and testing strategy for assigned audits to ensure key business risks and controls are evaluated. Draft, coordinate and participate in the completion of audit procedures (i.e., user stories). Communicate audit findings to the audit team and stakeholders. Provide peer reviews of workpaper documentation to ensure the retained documentation supports the audit work performed. Complete and deliver projects and related deliverables on time, with quality and within budget. Perform testing verifying the effectiveness of established processes and procedures; confirm audit findings/observations identified through detailed testing. Prepare for oral and written presentations to key stakeholders throughout, and at the conclusion of, audit projects by discussing process and control deficiencies and recommending corrective actions to improve operational controls, mitigate risk, improve efficiencies or reduce costs. Prepare draft reports for review ensuring audit comments are clear, concise and focused on root causes and intended outcomes. Work as a global resource and participate in audit assignments in any location, as necessary. Provide input into department initiatives (e.g., templates, audit manuals and methodologies) as necessary. Interpret policies and procedures and apply professional auditing principles and standards to test and evaluate IT and Cybersecurity operations and systems. Design audit procedures that adequately address risk and compliance with company standards and relevant regulations. What You’ll Need Bachelor's degree (BS or BA) from a four-year university in Computer Science, Computer Information Systems, Computer Engineering, Management Information Systems, or related field. 7+ years of combined professional business and/or experience within an audit environment. Equivalent work experience will be considered. Preferred experience with Cybersecurity, Sarbanes-Oxley, IT General Controls, COBIT framework and NIST frameworks. Additional certifications preferred in CRISC, CISSP or CISM or similar. Excellent written and verbal communication skills to accurately explain technical solutions. Strong organizational and analytical skills. Ability to provide efficient, timely, reliable and courteous service to audit and business stakeholders. Ability to respond effectively to requests and support issues and work collaboratively with business partners. Leadership skills to motivate the team to achieve broad operational targets with impacts on own job discipline, multiple job disciplines, and the department. In-depth knowledge of Microsoft Office products (Word, Excel, Outlook, etc.). Extensive organizational skills and an inquisitive mindset. Strong numerical ability and the capacity to perform complex calculations related to financial data. Why CBRE CBRE is a global leader in commercial real estate services and investment that helps businesses and people thrive. We are dynamic problem solvers and forward-thinking professionals who create significant impact. Our collaborative culture is built on our shared values — respect, integrity, service and excellence — and we value the diverse perspectives, backgrounds and skillsets of our people. We welcome all applicants. Our Values in Hiring: At CBRE, we are committed to fostering a culture where everyone belongs. We value diverse perspectives and experiences, and we welcome all applications. Applicants must be currently authorized to work in the United States without the need for visa sponsorship now or in the future. We value human interaction to understand each candidate's unique experience, skills and aspirations. We do not use artificial intelligence (AI) tools to make hiring decisions, and we ask that candidates disclose any use of AI in the application and interview process. About CBRE Group, Inc.: CBRE Group, Inc. (NYSE: CBRE), a Fortune 500 and S&P 500 company headquartered in Dallas, is the world’s largest commercial real estate services and investment firm (based on 2024 revenue). The company has more than 140,000 employees serving clients in more than 100 countries. CBRE serves clients through four business segments: Advisory; Building Operations & Experience; Project Management; Real Estate Investments. Please visit our website at Equal Employment Opportunity: CBRE is an equal opportunity employer that values diversity. We have a long-standing commitment to providing equal employment opportunity to all qualified applicants regardless of race, color, religion, national origin, sex, sexual orientation, gender identity, pregnancy, age, citizenship, marital status, disability, veteran status, political belief, or any other basis protected by applicable law. Candidate Accommodations: CBRE provides reasonable accommodations in job application procedures for individuals with disabilities. If you require assistance due to a disability in the application or recruitment process, please submit a request via email at View email address on click.appcast.io or via telephone at View phone number on click.appcast.io (U.S.) and View phone number on click.appcast.io (Canada). #J-18808-Ljbffr CBRE