IT Audit Manager

Title:

IT Audit Manager

KBR - Delivering Solutions, Changing the World.

KBR is a global leader in delivering science, technology, and engineering solutions to governments and top tier commercial clients to overcome tomorrow’s challenges, always maintaining our commitment to Zero Harm. With a full portfolio of services, proprietary technologies and expertise, our approximately 37,000 employees are ready to handle projects and missions throughout their entire lifecycle, from planning and design to sustainability and maintenance. Whether at the bottom of the ocean or in outer space, our clients trust us to deliver the impossible on a daily basis.

Audit and Advisory Services at KBR plays a trusted role in supporting the company’s governance, risk management, and control environment through independent assurance and practical advisory insights. The team partners across the business to evaluate key risks, strengthen processes, and provide objective perspectives that help KBR operate with integrity, accountability, and continuous improvement.

Summary Section

The IT Audit Manager is responsible for leading and executing KBR's IT audit and IT SOX compliance activities. This role provides independent assurance and advisory support across information technology processes, systems, and emerging technology risks while overseeing the annual IT SOX compliance program.

The IT Audit Manager leads risk assessments, develops audit plans, manages audit and SOX engagements, supervises audit staff and third-party resources, and partners with management to evaluate and improve the effectiveness of governance, risk management, cybersecurity, system development lifecycle (SDLC), and internal control processes.

This position requires strong leadership, technical IT audit expertise, project management skills, and the ability to communicate effectively with stakeholders across all levels of the organization.

Responsibilities:

• Lead the planning and execution of the annual IT audit plan and IT SOX compliance program, including risk assessments, audit scoping, resource planning, and engagement oversight.
• Manage and execute technology-focused audits, SOX activities, advisory engagements, investigations, and special projects across the organization.
• Oversee the evaluation of IT General Controls (ITGCs), IT Application Controls (ITACs), SDLC controls, automated controls, interface controls, reports, and other technology-related controls.
• Assess technology, cybersecurity, operational, and compliance risks and provide independent assurance and advisory support to management.
• Develop and maintain the annual IT audit universe and risk assessment process to identify and prioritize audit activities across technology, cybersecurity, digital transformation, and regulatory compliance areas.
• Develop risk-based audit approaches and communicate observations, conclusions, and recommendations that support informed risk and business decisions.
• Lead, mentor, and supervise internal audit staff, contractors, and co-sourced resources while ensuring consistent application of audit methodologies and quality standards.
• Review audit documentation, testing results, and workpapers to ensure accuracy, completeness, and compliance with internal audit standards.
• Partner with IT management, business process owners, Internal Controls, and external auditors to support audits, SOX compliance activities, and audit reliance requirements.
• Assess control deficiencies, support remediation planning, validate corrective actions, and communicate significant risks and issues to management.
• Support major technology initiatives, system implementations, cloud transformations, and other strategic projects through risk and control advisory services.
• Drive continuous improvement through data analytics, automation, AI-enabled technologies, and technology-enabled audit techniques.
• Stay current on emerging technology risks, cybersecurity trends, regulatory developments, and leading practices in IT audit, risk management, and compliance.

Preferred Skills:

• Strong understanding of SOX 404 requirements, audit methodologies, and internal control frameworks.
• Strong knowledge of cybersecurity, cloud technologies, ERP systems, SDLC processes, and emerging technology risks.
• Excellent leadership, analytical, problem-solving, and project management skills.
• Strong written and verbal communication skills with the ability to influence stakeholders across all levels of the organization.
• Experience presenting audit results and risk matters to senior leadership.
• Experience leveraging data analytics, automation, and AI-enabled technologies to improve audit effectiveness and efficiency.
• Ability to manage multiple priorities and deliver high-quality results in a dynamic global environment.

Preferred Qualifications and Experience:

• Bachelor's degree in Information Systems, Accounting, Computer Science, Cybersecurity, Engineering, Business, or a related field.
• Preferred certifications include CISA, CIA, CISM, CISSP, CPA or other equivalent professional certifications
• Minimum 10 years of progressive experience in IT Audit, Internal Audit, IT Risk, IT Compliance, Cybersecurity, or related disciplines.
• Minimum 4 years of experience leading IT SOX compliance programs and audit teams.
• Demonstrated experience performing and managing SOX 404 testing.
• Strong experience evaluating and testing ITGCs, IT Application Controls (ITACs), SDLC controls, interfaces, automated controls, reports, and Information Produced by the Entity (IPE).
• Experience leading audits within large, complex, multinational organizations.
• Experience managing external auditor relationships and reliance activities.

Belong. Connect. Grow. with KBR!