Senior Manager (IT AUDIT/RISK MANAGEMEN / CIA / CISA) in TYSONS - Hybrid

ROLE ON THIS ENGAGEMENT

Directs day-to-day execution across all three review workstreams (Technology Development, Application Maintenance, Data Management), owns the project plan and milestone tracking, and is the primary point of contact for Internal Audit''s designated liaisons.

KEY RESPONSIBILITIES

•  Design and own the overall review methodology, workplans, and control/testing matrices across all three scope areas

•  Lead working sessions, design reviews, and stakeholder interviews with technology development, application support, and data management teams

•  Review and approve control testing performed by Managers/Senior Consultants; ensure workpapers meet quality and evidentiary standards

•  Own the client-facing deliverables: current-state assessment, gap analysis, prioritized roadmap, and final report

•  Manage engagement risk, timeline adherence, and budget-to-actual tracking

REQUIRED EXPERIENCE

•  10+ years in internal audit, technology risk, or IT advisory, including leading SDLC/DevOps process reviews

•  Hands-on experience assessing application maintenance/change management governance (incident management, release governance, technical debt)

•  Experience evaluating data governance and self-service BI environments (e.g., PowerBI or comparable), including data quality, access controls, and report validation/auditability

•  Familiarity with AI-assisted development tooling (e.g., GitHub Copilot) and associated governance/control considerations

•  Experience building implementation-ready, board- or CAE-ready deliverables (not conceptual outputs)

CREDENTIALS / PREFERRED QUALIFICATIONS

CISA and/or CIA required; PMP or Agile/Scrum certification a plus; prior experience with in-house audit management platforms (e.g., AuditBoard, TeamMate, or bespoke systems similar to APPEX) strongly preferred.