Director Information Technology Audit {176600}

Job Description

IT Audit Director – Cybersecurity, AI & Cloud

\n

Location: Washington, DC

\n

Salary: $180,000–$220,000

\n

Direct Hire

\n

No C2C or third-party candidates accepted at this time

\n

Position Overview

\n

We are seeking an experienced IT Audit Director – Cybersecurity, AI & Cloud to provide technical and strategic leadership across complex technology audits involving artificial intelligence, cybersecurity, cloud infrastructure, IT governance, resiliency, operating systems, and enterprise technology platforms .

\n

This is a hands-on leadership position for someone who can take ownership of sophisticated technology audits from planning through execution and reporting while also serving as a technical authority, mentor, and trusted advisor.

\n

The successful candidate will combine deep IT Audit, IT Risk, or Information Security expertise with current knowledge of emerging technologies. Particular emphasis will be placed on AI and agentic AI risk, cybersecurity, cloud environments such as AWS, data analytics, and technology resiliency .

\n

Key Responsibilities

\n

\n
• Lead and oversee complex technology audits involving:
\n
• Artificial Intelligence and Agentic AI
\n
• Cybersecurity
\n
• Cloud infrastructure
\n
• Technology resiliency
\n
• IT governance
\n
• Operating systems and enterprise infrastructure
\n
• Own audits and technical reviews from planning and risk assessment through testing, reporting, and final recommendations .
\n
• Apply specialized technical expertise to evaluate complex technology environments and controls.
\n
• Identify current and emerging technology risks and assess their potential organizational impact.
\n
• Determine areas requiring deeper analysis and adjust audit approaches based on identified risk.
\n
• Participate in annual audit planning with a focus on significant and emerging IT risks.
\n
• Develop innovative audit and testing approaches for complex technical environments.
\n
• Perform hands-on testing of highly technical subject areas rather than functioning solely as a people manager.
\n
• Provide project management and technical oversight to IT Audit team members.
\n
• Set audit direction and review testing approaches and completed work.
\n
• Coach, mentor, and provide actionable feedback to audit professionals.
\n
• Develop points of view and risk assessments covering emerging areas such as AI, cybersecurity, cloud, and resiliency .
\n
• Serve as a subject matter resource for complex technical domains.
\n
• Build and maintain strong relationships with technology and business leadership.
\n
• Communicate audit findings, technical risks, and recommendations effectively to both technical and non-technical stakeholders.
\n
• Identify opportunities to incorporate data analytics, automation, and AI into audit testing and execution .
\n
• Personally develop and execute analytics while helping other team members expand their technical capabilities.
\n
• Promote innovative approaches that improve audit efficiency, effectiveness, and risk visibility.
\n

\n

Required Qualifications

\n

\n
• 8+ years of experience in IT Audit, IT Risk Management, Information Security, or a closely related discipline.
\n
• Expert-level knowledge in one or more of the following:
\n
• Cybersecurity
\n
• Artificial Intelligence
\n
• Cloud infrastructure and security
\n
• Strong understanding of cloud technologies, particularly Amazon Web Services (AWS) or comparable cloud platforms.
\n
• Experience leading complex technology audits or risk assessments.
\n
• Strong project management and audit execution skills.
\n
• Previous experience coaching, mentoring, and providing feedback to audit professionals.
\n
• Ability to communicate effectively with highly technical subject matter experts.
\n
• Excellent written, verbal, and executive-level communication skills.
\n
• Strong critical-thinking and risk-analysis abilities.
\n

\n

Data Analytics

\n

\n
• Strong experience identifying, designing, and implementing data visualizations.
\n
• Experience with visualization and analytical tools such as:
\n
• Power BI
\n
• Tableau
\n
• Plotly
\n
• Seaborn
\n
• Programming and data analytics experience using Python .
\n
• Experience with technologies and libraries such as SciPy, NumPy, and/or PySpark .
\n

\n

Artificial Intelligence

\n

\n
• Experience using AI solutions to improve audit effectiveness and efficiency .
\n
• Demonstrated experience auditing AI solutions and evaluating AI-related risks .
\n
• Knowledge of agentic AI architectures and associated risks .
\n
• Ability to evaluate emerging AI technologies from technology-risk, cybersecurity, governance, and audit perspectives.
\n
• Demonstrated curiosity and adaptability in learning and responsibly applying emerging technologies.
\n

\n

Preferred Qualifications

\n

\n
• 10+ years of experience in IT Audit, IT Risk Management, or Information Security.
\n
• 5+ years specifically within IT Audit .
\n
• Bachelor’s degree or equivalent professional experience.
\n
• Master’s degree or MBA in a relevant discipline preferred, including:
\n
• Computer Science
\n
• Information Systems
\n
• Cybersecurity
\n
• Mathematics
\n
• Related technical disciplines
\n
• One or more relevant professional certifications preferred:
\n
• CISA
\n
• CISSP
\n
• CISM
\n
• CRISC
\n
• CEH
\n

\n

Ideal Candidate

\n

The ideal candidate is not simply a traditional IT auditor or people manager. We are looking for someone who remains technically hands-on and can independently evaluate sophisticated technology environments while leading other audit professionals.

\n

Strong candidates will have a combination of IT Audit, cybersecurity, cloud, and emerging AI risk expertise , with the ability to examine technologies at a meaningful technical depth and translate those findings into business and enterprise risk.

\n

Experience assessing AI/ML systems, generative AI, agentic AI architectures, cloud infrastructure, cybersecurity controls, and technology resiliency will be especially valuable.

\n

This individual should be equally comfortable reviewing technical controls and analyzing data, challenging technical SMEs, coaching audit staff, and communicating risk to senior leadership .