Senior Manager, IT Audit

Job Description:

Reporting directly to the Vice President of Internal Audit, the Senior Manager, IT Audit holds a pivotal role in overseeing and executing IT audits conducted by the Internal Audit Department. This leadership position entails significant exposure to IT operations, cybersecurity, and infrastructure teams, with frequent interaction with senior leaders across the organization. 

As a senior member of the Internal Audit Department, the Senior Manager is expected to adopt a hands-on approach, reflecting Envista's culture of actively engaging in all levels of execution to achieve objectives. The role is instrumental in shaping the IT audit strategy, strategically balancing in-house resources with third-party expertise. 

Key responsibilities include developing and managing the comprehensive IT audit plan, leading the execution of audits, and supporting special reviews, system implementations, and other critical projects as needed. This role demands a proactive leader capable of fostering collaboration and delivering value across the organization. 

The Senior Manager, IT Audit plays a critical role in identifying and assessing risk areas within each audit review. This ensures that all risks are comprehensively addressed and that actionable recommendations are provided to mitigate these risks effectively. Additionally, the Senior Manager is responsible for ensuring that all audit findings are thoroughly documented and promptly communicated to management, maintaining transparency and facilitating informed decision-making.

Key Responsibilities:

• Develop a flexible annual audit plan based on risk analysis, incorporating emerging risks.
• Implement the annual audit plan as approved by the Audit Committee, including special tasks or projects as requested.
• Provide assurance on the adequacy and effectiveness of processes, including adherence to industry best practices, policies, procedures, laws, and regulations.
• Prepare detailed reports for each audit conducted, outlining observations, findings, and recommendations; communicate results with the senior leadership team and provide consultation on key issues identified during audits.
• Monitor the implementation status of recommendations made in previous audits.
• Ensure compliance with professional standards (e.g., Global Internal Audit Standards (GIAS)) while maintaining independence, objectivity, and integrity throughout the entire process.
• Manage relationships with internal and external stakeholders, such as regulators, external auditors, and consultants, building trust and addressing concerns raised during reviews.
• Perform consulting engagements to assist management in meeting its objectives, including facilitation, process design, training, and other advisory services.
• Assist in investigating suspected fraudulent activities within the organization.
• Perform other related duties incidental to the work described or as assigned by the VP of Internal Audit.

Job Requirements:

Requirements: 

• Bachelor's degree in Information Technology, Management Information Systems, Computer Science, Finance, Accounting, Business Administration, or related fields.
• 10+ years of relevant experience with professional audit firms (e.g., Big Four, BDO, Grant Thornton, etc.) and/or internal audit experience with Fortune 500 companies.
• One of the following certifications: CISA, CISM, CISSP, CPA, or CIA.
• Extensive knowledge of auditing principles and practices aligned with Global Internal Audit Standards (GIAS) and/or professional audit firm methodologies.
• Practical experience and expertise in IT compliance and regulatory requirements, such as SOX 404, FDA 21 CFR Part 820, and control frameworks, including ITIL, COBIT, NIST 800-53, ISO 13485, ISO 27001/2, and ISO 62304.
• Strong knowledge of corporate information technologies, including IaaS (e.g., AWS, Azure infrastructure), ERPs (e.g., SAP, Oracle), CRMs (e.g., Salesforce), data warehouses (e.g., Snowflake), and reporting tools (e.g., Tableau).
• Solid understanding of security concepts, such as Network Security, Endpoint Security, Vulnerability Management, Security Incident and Event Management, Identity Governance and Administration (IGA), and physical security.

Preferred:

• Exceptional relationship-building skills with a strong client service focus, as well as excellent communication and presentation skills suited for senior leadership, functional area management, and staff.
• High level of integrity and dependability, with a strong sense of urgency and results orientation.
• Proven leadership and development abilities, with a track record of successfully leading, managing, and de