Manager – Technology Audit & Technology Risk (Infrastructure, Cloud, AI & Integrated Audits)

Role Summary

We are seeking an experienced Manager – Technology Audit & Technology Risk to lead and deliver Technology Audit, Infrastructure Platform Audits, Integrated Risk Audits, Regulatory Reviews, SOX Controls Assurance, and AI Governance engagements across global financial services and enterprise clients.

The role requires deep expertise in auditing technology infrastructure environments including servers, databases, cloud platforms, networks, firewalls, identity and access management, and technology operations. The candidate will also be expected to assess emerging technology risks associated with Artificial Intelligence (AI), machine learning environments, and AI lifecycle governance.

The ideal candidate will possess strong audit leadership capabilities, stakeholder management skills, regulatory awareness, and hands-on experience evaluating technology controls across modern enterprise environments while leading large client-facing engagements and managing teams.

Key Responsibilities

Technology Audit & Risk Assurance

• Lead and manage Technology Audit, Technology Risk, SOX, Integrated Audits, Controls Assurance, and Regulatory Review engagements.
• Develop risk-based audit plans, audit programs, and testing strategies.
• Evaluate technology governance, operational effectiveness, and risk management processes.
• Perform end-to-end audit lifecycle management including planning, walkthroughs, testing, reporting, and remediation validation.
• Assess design effectiveness and operating effectiveness of technology controls.
• Lead audit issue discussions with stakeholders and track remediation activities to closure.
• Prepare audit reports, executive summaries, and Audit Committee-ready presentations.

Infrastructure Platform Audits

Lead audits covering:

Server Infrastructure

• Windows Server
• Linux / Unix Platforms
• Virtualization Platforms
• Enterprise Compute Environments

Database Platforms

• Oracle
• SQL Server
• PostgreSQL
• MySQL
• NoSQL Databases
• Database Security & Administration Controls

Cloud Platforms

• Microsoft Azure
• AWS
• Google Cloud Platform (GCP)

Network & Security Infrastructure

• Firewalls
• Routers
• Switches
• Load Balancers
• Network Segmentation Controls
• Perimeter Security Controls

Identity & Access Management

• Active Directory
• Privileged Access Management
• User Access Reviews
• Joiner-Mover-Leaver Processes
• Segregation of Duties (SoD)
• Authentication & Authorization Controls

Technology Operations

• Backup & Recovery
• Batch Processing
• Job Monitoring
• Incident Management
• Problem Management
• Capacity Management
• Business Continuity & Disaster Recovery

Technology Controls & Integrated Audits

• Lead IT General Controls (ITGC) assessments covering:
• Change Management
• Access Management
• Computer Operations
• Privileged Access Controls
• Evaluate IT Application Controls (ITACs), automated controls, interfaces, and Information Produced by the Entity (IPE).
• Perform integrated audits linking technology controls to business and financial processes.
• Review SOX technology controls and controls assurance requirements.
• Assess control environments across ERP, cloud, and custom-developed systems.

AI Governance & AI Lifecycle Audits

• Evaluate AI and Machine Learning governance frameworks.
• Assess controls across the AI lifecycle including:
• Data Acquisition
• Model Development
• Training & Validation
• Deployment
• Monitoring & Change Management
• Model Retirement
• Perform AI model re-performance reviews and control validation.
• Review AI governance, explainability, accountability, and monitoring controls.
• Assess risks related to generative AI implementations and emerging technology environments.
• Evaluate compliance with Responsible AI and enterprise AI governance requirements.

Regional Audits & Regulatory Reviews

• Support Regional Audits, Risk Pillar Reviews, and Integrated Audit engagements.
• Assess regulatory compliance requirements applicable to technology functions.
• Evaluate risk management frameworks across Technology, Cyber Security, Infrastructure, and Operations functions.
• Participate in regulatory review support activities and remediation validation.

Preferred Regulatory Exposure

• RBI Regulatory Reviews
• Banking Technology Risk Frameworks
• Information Security Governance Reviews
• Operational Risk Assessments
• Regulatory Compliance Audits

SDLC & Technology Governance

• Assess Software Development Lifecycle (SDLC) controls including:
• Requirements Governance
• Development Standards
• Code Reviews
• Testing Controls
• Release Management
• Deployment Governance
• Evaluate DevOps and CI/CD control environments.
• Review system implementation, migration, and transformation programs.

Client & Stakeholder Management

• Serve as primary client contact for technology audit engagements.
• Engage with senior technology, infrastructure, cybersecurity, risk, and business stakeholders.
• Present audit observations, risk assessments, and recommendations to senior management.
• Support discussions with executive leadership and governance committees.
• Build trusted advisor relationships with client leadership teams.

Project & Team Leadership

• Lead multiple concurrent technology audit engagements.
• Manage teams of auditors, consultants, and analysts.
• Review workpapers, audit documentation, and client deliverables.
• Drive engagement quality, budget management, and resource planning.
• Coach, mentor, and develop junior professionals.
• Support talent development and knowledge-sharing initiatives.

Business Development & Practice Development

• Support proposals, RFP responses, client pursuits, and solution development.
• Contribute to development of technology audit methodologies, accelerators, and reusable frameworks.
• Participate in thought leadership, training programs, and market initiatives.
• Identify opportunities to expand client relationships and support business growth.

Required Qualifications

• Bachelor's or Master's degree in Information Technology, Computer Science, Information Systems, Cyber Security, Engineering, or related disciplines.
• Professional certifications preferred:
• CISA
• CISSP
• CRISC
• CISM
• CIA
• Certified Cloud Certifications (AWS/Azure/GCP)
• Relevant AI Governance / Data Certifications

Experience Requirements

• 8-12 years of experience in:
• Technology Audit
• IT Risk
• Controls Assurance
• Infrastructure Audits
• Cloud Audits
• Integrated Audits
• Regulatory Reviews
• Financial Services Technology Risk
• Demonstrated experience leading client-facing technology audit engagements.
• Experience managing teams and delivering multiple complex engagements simultaneously.

Preferred Skills

Technology Audit

• ITGC
• ITAC
• SOX Technology Controls
• Integrated Audits
• Controls Assurance

Infrastructure & Cloud

• Azure
• AWS
• GCP
• Active Directory
• Server Platforms
• Database Technologies
• Network Security
• Firewalls & Routing Technologies

AI & Emerging Technology

• AI Governance
• AI Lifecycle Reviews
• Model Risk Management
• Responsible AI Controls
• AI Re-performance Testing
• Generative AI Risk Assessments

Regulatory & Financial Services

• RBI Reviews
• Banking Technology Risk
• Operational Risk Frameworks
• Information Security Governance
• Financial Services Industry Experience

Analytics & Automation

• SQL
• Python
• Power BI
• Alteryx
• Tableau
• Data Analytics for Audit

Core Competencies

• Technology Audit & Risk Management
• Infrastructure Platform Audits
• Cloud Risk & Cloud Controls
• IT General Controls (ITGC)
• IT Application Controls (ITAC)
• AI Governance & AI Lifecycle Assurance
• Integrated & Regional Audits
• Banking & Financial Services Risk
• Regulatory Compliance Reviews
• Technology Governance
• Stakeholder Relationship Management
• Team Leadership & Mentoring
• Executive Communication & Reporting
• Strategic Risk Assessment
• Quality & Risk Management

Ideal Candidate Profile

A seasoned Technology Audit Manager with deep expertise across Infrastructure Platform Audits, Cloud Risk, Technology Controls, AI Governance, Integrated Audits, and Financial Services Technology Risk. The ideal candidate combines strong technical audit capabilities with leadership experience, enabling effective assessment of technology risks across infrastructure, cloud, AI, and regulatory environments while leading high-performing teams and delivering strategic insights to senior stakeholders.

Level: Manager

Experience: 8-12 Years

Primary Focus: Technology Audit, Infrastructure Platform Audits, Cloud Risk, AI Lifecycle Audits, Integrated Audits, Regulatory Reviews, and Technology Risk Assurance.

Preferred Industry: Banking, Financial Services, Capital Markets, FinTech, and other highly regulated industries.