Onsite Senior Manager – IT Internal Audit

Posted 53 minutes ago

Apply now

About the role

  • Senior Manager—IT Audit leading ISO 27001 and ISO 22301 implementation at Blue Yonder. Overseeing enterprise security and continuity frameworks alongside global stakeholders and auditors.

Responsibilities

  • Lead the end-to-end implementation of ISO 27001 and ISO 22301 frameworks, including gap assessments, policy development, control implementation, documentation, and certification readiness.
  • Design, implement, and maintain Information Security Management Systems (ISMS) and Business Continuity Management Systems (BCMS) aligned with global best practices.
  • Coordinate with external certification bodies and auditors during certification and surveillance audits.
  • Ensure governance mechanisms to ensure continuous compliance and improvement of ISO standards.
  • Ensure and review the integration of ISO controls into business processes, IT operations, vendor management, and product development lifecycles.
  • Review the implementation of Business Impact Analysis (BIA) and risk assessments as part of the Business Continuity Management framework.
  • Develop and implement business continuity strategies, disaster recovery plans, and crisis management frameworks aligned with ISO 22301.
  • Establish third-party risk management controls aligned with ISO requirements for vendor security assessments and monitoring.
  • Plan, execute, and manage risk-based IT audits covering IT governance, infrastructure, cybersecurity, application controls, and operational processes.
  • Perform independent assessments of IT risks and internal controls to strengthen enterprise risk management practices.
  • Provide strategic recommendations to leadership for improving internal control frameworks and reducing operational risks.
  • Develop and maintain audit documentation and reports aligned with industry audit methodologies and regulatory expectations.
  • Lead initiatives related to information security programs, cyber risk management, and IT compliance frameworks.
  • Assess organizational compliance with ISO standards, regulatory requirements, and internal security policies.
  • Drive improvements in data security, data governance, and data management practices.
  • Support implementation of security best practices aligned with global frameworks such as NIST, COBIT, and ITIL.
  • Conduct IT General Controls (ITGC) and IT Application Controls (ITAC) testing in regulated environments.
  • Support J-SOX compliance and internal control testing programs.
  • Serve as the primary liaison between internal teams and external auditors, ensuring smooth execution of audits and compliance reviews.
  • Build strong relationships with senior leadership and global stakeholders to drive risk awareness and governance maturity.

Requirements

  • 10+ years of experience in IT Audit, Information Security, Risk Management, or IT Compliance.
  • Strong demonstrated experience in implementing ISO 27001 and ISO 22301 frameworks end-to-end.
  • Strong understanding of IT governance, cybersecurity controls, system development lifecycle, and IT project management.
  • Proven ability to manage complex information security and regulatory compliance projects.
  • Experience working with global teams and stakeholders across multiple geographies.
  • Strong communication and stakeholder management skills, particularly with internal leadership and external auditors.
  • Experience in data governance, data security, and data management practices.
  • Prior experience in regulated industries, consulting firms, or internal audit environments is highly desirable.
  • Bachelor’s degree in computer science, Information Security, Information Systems, Accounting, Engineering, or a related discipline.
  • Professional certifications such as CISA, CISM, CISSP, ISO 27001 Lead Implementer, or ISO 27001 Lead Auditor are highly preferred.

Benefits

  • Health insurance
  • 401(k) plans
  • Paid time off
  • Remote work options
  • Professional development opportunities

Job title

Senior Manager – IT Internal Audit

Job type

Experience level

Senior

Salary

Not specified

Degree requirement

Bachelor's Degree

Tech skills

Location requirements

Report this job

See something inaccurate? Let us know and we'll update the listing.

Report job