Director IT Audit – Mobility

S&P Global

Director IT Audit at S&P Global leading the IT and technology audit program. Responsible for audit strategies, compliance, and risk management in technology controls.

Posted 4/23/2026full-timeRemote • Virginia • 🇺🇸 United StatesLeadWebsite

Tech Stack

Tools & technologies

CloudCyber Security

About the role

Key responsibilities & impact

Design, own, and execute a comprehensive IT audit strategy and annual audit plan - built on a robust IT risk assessment process that reflects the company's technology landscape, cybersecurity and privacy risks, and strategic priorities.
Lead IT general controls and IT application testing in support of SOX compliance, ensuring technology controls are appropriately designed, operating effectively, and aligned with external auditor requirements.
Lead non-SOX IT and operational technology audits covering areas including cybersecurity, privacy, cloud infrastructure, data governance, third-party/vendor risk, IT change management, access management, business continuity, etc.
Serve as the primary internal audit liaison for the CIO and CISO - providing regular updates on the IT audit plan, findings, and emerging technology risks, and functioning as a credible, independent thought partner on IT risk matters.
Communicate IT audit results to executive leadership and the Audit Committee - translating highly technical findings into clear business risk language that drives informed decision-making.
Partner with external auditors on SOX IT audit coordination, reliance strategies, and control testing to maximize efficiency and minimize duplication.
Monitor remediation of IT audit findings, ensuring management addresses issues with sustainable solutions - not just temporary fixes.
Stay ahead of the evolving technology risk landscape including AI governance, cloud security, ransomware, third-party risk, and regulatory developments affecting IT controls.
Build and lead a high-performing global IT audit team, developing technical skills, audit methodology, and the ability to communicate complex findings to diverse audiences.
Lead the development of AI‑driven and automated audit processes to improve audit quality, efficiency, and scalability.

Requirements

What you’ll need

Bachelor's degree in Information Systems, Computer Science, Accounting, or a related field required; advanced degree a plus.
10+ years of IT audit experience with at least 4 years in an IT audit leadership role.
Big 4 public accounting background or equivalent public accounting experience strongly preferred.
At least one active audit-related professional certification required: CISA, CISSP, CPA, CIA, etc. - CISA or CISSP strongly preferred for this role.
Deep expertise in IT general controls, IT application controls, SOX ITGC compliance, and IT risk-based audit methodologies.
Strong technical knowledge across key IT domains including cybersecurity, cloud platforms, access management, data governance, and IT infrastructure.
Proven experience partnering directly with CIO and CISO-level stakeholders - able to engage credibly on technical matters while maintaining audit independence.
Demonstrated ability to translate complex technical audit findings into clear, business-relevant narratives for executive and Board audiences.
Experience leading non-SOX technology audits including cybersecurity assessments, vendor/third-party risk reviews, and cloud control evaluations.

Benefits

Comp & perks

Health & Wellness: Health care coverage designed for the mind and body.
Flexible Downtime: Generous time off helps keep you energized for your time on.
Continuous Learning: Access a wealth of resources to grow your career and learn valuable new skills.
Invest in Your Future: Secure your financial future through competitive pay, retirement planning, a continuing education program with a company-matched student loan contribution, and financial wellness programs.
Family Friendly Perks: It’s not just about you. S&P Global has perks for your partners and little ones, too, with some best-in-class benefits for families.
Beyond the Basics: From retail discounts to referral incentive awards—small perks can make a big difference.

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

IT audit strategyIT risk assessmentSOX complianceIT general controlsIT application testingcybersecuritycloud infrastructuredata governanceaccess managementaudit methodology

Soft Skills

communicationleadershipindependent thought partnershiptranslating technical findingsstakeholder engagementteam developmentdecision-makingproblem-solvingnarrative developmentcollaboration

Certifications

CISACISSPCPACIA