Senior IT Internal Audit Manager- Boise, ID

Summary

As a Senior IT Internal Audit Manager, you will be a critical member of the Internal Audit leadership team, leading the development and execution of Simplot's in-house IT internal audit capability. You will drive the future strategy of the department through innovation, technology enablement, and process excellence while fostering a culture of agility in auditing. Your role involves collaborating with stakeholders across Technology, Cybersecurity, Data Science, and the broader business to develop and implement a risk-based IT audit plan aligned with company strategies and emerging technology risks. You will be responsible for overseeing the entire IT audit process, from planning through reporting, and will serve as the department's senior IT subject matter expert. This role is crucial in protecting Simplot's information assets, ensuring the reliability of technology-enabled financial reporting, and promoting operational efficiency through strong technology governance and controls. 

Key Responsibilities

• Establish and nurture relationships with stakeholders across Technology, Cybersecurity, Data Science, and business group technology leaders.
• Lead the development and implementation of the risk-based IT audit plan aligned to company strategies, initiatives, and emerging technology risks (including cybersecurity, cloud, ERP, AI/ML, and data privacy).
• Build the in-house IT audit function, including methodology, audit programs, work paper standards, and reporting templates aligned with appropriate frameworks.
• Manage IT audit execution from planning to reporting. Evaluate IT general controls, application controls, and technology processes; document risks; and recommend improvements. Present audit findings to management and work with stakeholders to implement corrective actions.
• Successfully oversee multiple projects simultaneously, ensuring all assigned tasks are completed within the designated timeline.
• Apply expertise in IT policy, procedures, internal control concepts, and best practices to evaluate the effectiveness of technology governance and compliance by process owners.
• Stay up to date on internal audit practices, regulatory requirements, and IT risk frameworks to understand their impact on our audit work.
• Stay current with emerging trends in AI, data analytics, cloud, and technology risk; champion the use of analytics, automation, and AI-enabled assurance to expand audit coverage.
• Serve as the department's senior IT subject matter expert, coaching and upskilling internal audit staff with limited IT backgrounds on technology risk and audit techniques.
• Support talent and career development and guide employees in professional growth through a focus on communication and accountability as well as technical and project management skills.
• Work in conjunction with external auditors to support the external audit process, including IT general controls walkthroughs, control testing, and compiling reports to optimize external testing requirements.
• Participate and support internal investigations involving a technology component (e.g., data analytics, log review, system access reconstruction), understanding key principles of investigative assignments while ensuring anonymity and need-to-know requirements.

Typical Education

• Bachelor's degree or higher in Information Systems, Computer Science, Cybersecurity, Accounting Information Systems, or a related field.

Relevant Experience

• 10+ years of relevant IT internal audit, IT risk, or IT assurance experience, including previous leadership roles and demonstrated experience building or significantly maturing an IT audit function or program.
• Demonstrated ability to independently evaluate complex IT infrastructure and cybersecurity controls, including identity and access management, vulnerability management, cloud security, network security, security operations, and incident response processes.
• Exceptional interpersonal, written, and verbal communication skills, including the proven ability to translate complex technical concepts into clear business language for non-technical executives and board members.
• Proven analytical, problem-solving, and critical-thinking abilities.
• Experience with Microsoft Power BI or other data visualization and data analytics tools (e.g., SQL, Python) for reporting and analysis preferred.

Required Certifications

• Certified Information Systems Auditor (CISA) required.
• Strongly preferred additional professional certifications such as: 
  • Certified Information Systems Security Professional (CISSP)
  • Certified in Risk and Information Systems Control (CRISC)
  • Certified Information Security Manager (CISM)
  • Certified Internal Auditor (CIA)
  • Certified Public Accountant (CPA)  

Other Information

• Position based in Boise, Idaho. Travel up to 15% domestically and internationally.