Director, Internal Audit - Technology

Position Overview

Apollo is a high-growth, global alternative asset manager. In our asset management business, we seek to provide our clients excess return at every point along the risk-reward spectrum from investment grade to private equity with a focus on three investing strategies: yield, hybrid, and equity. For more than three decades, our investing expertise across our fully integrated platform has served the financial return needs of our clients and provided businesses with innovative capital solutions for growth. Through Athene, our retirement services business, we specialize in helping clients achieve financial security by providing a suite of retirement savings products and acting as a solutions provider to institutions. Our patient, creative, and knowledgeable approach to investing aligns our clients, businesses we invest in, our employees, and the communities we impact, to expand opportunity and achieve positive outcomes.

Come to Apollo and join a community of extraordinary people who are committed to a culture of excellence and collaboration in everything that we do. We invest in our people for the long term and are committed to supporting their development at every stage of their career.

Apollo is seeking an exceptional, organized and detail-oriented candidate to join its Internal Audit team.  Reporting to the Internal Audit Information Technology Principal, this person will join a collaborative and highly dynamic team and will assist in the planning and execution of audits across the firm.  This will entail overseeing and executing technology audits across the organization, ensuring robust IT governance, effective risk management, and compliance with applicable regulations and internal policies.  The ideal candidate will bring a strong technical background, sound risk judgment, and a proven ability to manage complex audit engagements from planning through reporting.

The successful candidate will possess exceptional leadership capabilities who identifies and promotes emerging talent and is able to work calmly in a fast-paced, high pressure business environment and able to think outside of the box. S/he will conduct audit reviews in specialized areas, such as cybersecurity, IT risk management, enterprise architecture, application development and engineering, infrastructure, and vendor management, requiring specific knowledge pertaining to the areas, policies and regulations being audited. 

Primary Responsibilities

• Lead and execute audits, including critical technology functions, cloud-based infrastructure, cybersecurity, risk management, application, and third-party management. Develop effective test plans and perform audit testing to ensure timeliness, accuracy, and quality.

• Demonstrate professional skepticism while conducting audits, independently raising findings within established criteria, and keeping management and leadership informed throughout the process.

• Establish and maintain strong client relations during engagements, effectively communicating results to management via written reports and oral presentations. Prepare clear, organized documentation to support work performed.

• Drive continuous improvement by providing objective evaluations of technology processes, enhancing the organization’s risk management capabilities, and developing business partnerships enterprise wide.

• Stay informed about emerging cybersecurity technologies and trends, assessing their impact on the organization's risk landscape.

Qualifications & Experience

• Ten+ years of relevant experience in internal audit (or similar/related function).

• Strong understanding of audit methodologies, internal control concepts, and the ability to evaluate and determine the adequacy of control design and operating effectiveness.

• Strong experience in managing and evaluating security controls, with proficiency in the such key areas such as Security and Risk Management, Asset Security, Security Architecture and Engineering, Communication and Network Security, Security Operations, and Operational Resiliency.

• Strong strategic thinking skills, with the ability to align audit activities with the organization's strategic objectives and cybersecurity goals.

• Excellent verbal and written communication skills, with the ability to effectively communicate complex security concepts to stakeholders at all level.

In addition, the ideal candidate will be or have:

• CISA, CISM, CRISC or CISSP certifications is a plus, but not required

• Knowledge of COBIT, NIST, ITIL, Center for Internet Security (CIS) standards and frameworks

• Knowledge of IT general controls, cybersecurity practices, cloud platforms