Position Summary
The Internal Audit Manager is responsible for leading and executing risk-based internal audit engagements, Sarbanes-Oxley (SOX) compliance programs, internal control assessments, and advisory projects across a geographically diverse organization. This role serves as a trusted advisor to management by evaluating governance, risk management, and internal control processes while driving accountability for issue resolution and continuous improvement.
The ideal candidate combines strong audit and risk management expertise with experience in SOX Program Management Office (PMO) activities, mergers and acquisitions (M&A) integration controls, technology-enabled auditing, data analytics, and continuous monitoring. The successful candidate will be a proactive problem solver who leverages structured root cause and corrective action methodologies to help improve business performance, regulatory compliance, and operational effectiveness.
This position requires collaboration with business, finance, operations, information technology, compliance, and executive leadership teams across multiple locations and may require up to 50% travel.
Key Responsibilities
Internal Audit Execution
- Lead and perform risk-based internal audit engagements covering operational, financial, compliance, regulatory, and technology risks.
- Develop audit scopes, risk assessments, audit programs, testing procedures, and executive-level reports.
- Evaluate the design and operating effectiveness of internal controls and recommend practical, risk-based improvements.
- Present audit findings, root causes, risk implications, and corrective actions to management and senior leadership.
- Monitor remediation activities and validate closure of management action plans.
SOX PMO and Internal Controls
- Support and coordinate the organization''s SOX compliance program, including planning, scoping, risk assessments, testing, deficiency evaluations, and reporting.
- Partner with business process owners and control owners to maintain effective internal control documentation.
- Facilitate SOX readiness, process improvements, and continuous monitoring activities.
- Evaluate the impact of system implementations, process changes, and organizational transformations on SOX compliance.
- Coordinate with external auditors and management to drive efficient audit execution.
Mergers & Acquisitions (M&A)
- Participate in acquisition due diligence activities focusing on governance, risk, compliance, and internal controls.
- Assess acquired entities'' control environments and identify integration risks.
- Support post-acquisition control harmonization, SOX integration planning, and control remediation efforts.
- Evaluate business process, financial reporting, cybersecurity, and regulatory compliance risks within acquired organizations.
Risk Management and Advisory Services
- Provide advisory support on emerging risks, business transformation initiatives, and strategic projects.
- Assist management in identifying, assessing, and mitigating risks.
- Facilitate risk assessments and support enterprise risk management initiatives.
- Promote practical risk management practices aligned with organizational objectives.
Issue Resolution and Continuous Improvement
- Lead or facilitate Root Cause Corrective Action (RCCA), 8D, Fishbone, and other structured problem-solving exercises.
- Evaluate recurring issues to identify systemic control weaknesses and sustainable corrective actions.
- Track issue remediation efforts and provide challenge and oversight to management action plans.
- Promote a culture of accountability, continuous improvement, and risk awareness.
Technology, Data Analytics, and Innovation
- Leverage data analytics, automation, and continuous monitoring techniques to enhance audit effectiveness and coverage.
- Utilize technology tools to identify trends, anomalies, and emerging risks.
- Evaluate automated controls, system configurations, and technology-enabled business processes.
- Explore and apply Artificial Intelligence (AI) and advanced analytics solutions to improve audit planning, testing, and reporting.
- Stay informed on emerging technologies, cybersecurity threats, and industry best practices.
Information Technology Controls
- Assess Information Technology General Controls (ITGCs).
- Collaborate with IT leadership to evaluate technology risks and control effectiveness.
- Support integrated audits that combine business process and IT control testing.