Sr. Manager - IT Infrastructure Audit

As a Manager / Senior Manager – IT Infrastructure Audit, reporting into the Global Internal Audit organization, you’ll play a critical role in assessing the quality of technology and infrastructure controls across all risk areas, planning and evaluating internal audit programs for the organization’s technology systems, and ensuring compliance with technology policies, procedures, standards, and regulatory expectations. 

You’ll thrive in this position if you’re risk-focused, collaborative, and comfortable working in a results-driven, high-performing international environment, with a genuine desire and drive to deliver top technology solutions to today’s markets. 

Key Responsibilities 

• Executing and reporting on the adequacy and effectiveness of technology controls across all risk areas. 

• Delivering against multiple and often time-concurrent audit projects, managing conflicting priorities to achieve results on time. 

• Planning, determining scope areas, drafting risk and control matrix and test procedures for technology infrastructure and operations audits. 

• Executing and reporting on technical controls through continuous auditing and monitoring. 

• Documenting issues and findings, ensuring alignment with corporate policies and procedures and regulatory standards. 

• Utilizing automated audit tools as an integrating part of audit planning and execution. 

• Participating in business, operations, and regulatory audits, project reviews, and audits of business processes to identify and evaluate key IT operational risks and controls. 

Required Qualifications 

• 6–11 years of risk-focused technology internal audit or related experience (i.e. cybersecurity). 

• Experience in audits of IT processes & governance, and IT infrastructure including networks, databases, operating systems, server configuration, VMware, end devices, Active Directory, logging, and monitoring tools. 

• Experience in auditing data centers and cloud infrastructure (AWS and Azure). 

• Understanding technology risk management principles and standards such as COBIT. 

• Strong team player who is approachable, collaborative, with experience in managing a team and stakeholders. 

• Excellent organizational, project management, communication skills, with demonstrated ability to write audit reports with minimal supervision and guidelines. 

Preferred Qualifications 

• Professional auditing certifications preferred: CISA (Certified Information Systems Auditor) or CISSP (Certified Information Systems Security Professional). 

• Experience working with global teams (USA and EMEA). 

• Fluent English language skills and a strong customer service mindset. 

This position will be located in New York, NY and follows U.S. business hours (9:00 a.m. – 5:00 p.m. EST). The role offers the opportunity for a hybrid work environment, with at least three days per week in the office, subject to change. 

Come as You Are

Nasdaq is an equal opportunity employer. We positively encourage applications from suitably qualified and eligible candidates regardless of age, color, disability, national origin, ancestry, race, religion, gender, sexual orientation, gender identity and/or expression, veteran status, genetic information, or any other status protected by applicable law.

We will ensure that individuals with di