Director, Cyber Security & IT Audit - Program Office

Director, Cybersecurity & IT Audit

At MoneyGram, we connect the world by making cross-border money transfers seamless, affordable, and secure for everyone.

We are seeking a Director of Cybersecurity & IT Audit to join our Internal Audit team. This role will play a key part in shaping the future of IT risk management and cybersecurity assurance across the enterprise. The Director will be expected to bring forward-looking insights, challenge the status quo, and help drive innovation in audit practices and IT governance.

The Director of Cybersecurity & IT Audit will have specific responsibility for defining, assessing, and executing the Cybersecurity & IT Audit plan within the IA function in accordance with professional best practices, and will assist the Vice President, IA and the leadership team in driving function-wide transformation programs and the strategic direction for the team.

What you will get to do

Develop and execute Cybersecurity and IT audit strategy in alignment with business objectives, based on thorough understanding of our business and risk exposures
Lead cybersecurity and IT risk assessments, define risk-based audit programs, and plan, execute, and report on audits and advisory reviews across cybersecurity, IT, cloud, data protection and privacy, identity and access management, technology resilience, third-party technology risk, and AI and other emerging technologies
Lead the IT SOX program, including ITGC risk assessment and scoping, control design, oversight of co-sourced testing, and reliance coordination with external auditors
Serve as a strategic partner and go-to advisor for Cyber & IT leaders on risk and control matters, aligning on priorities and the scoping, planning, and execution of work
Provide independent risk and control perspectives on IT governance, cybersecurity posture, and major technology initiatives, including system implementations and upgrades, cloud migrations, digital transformation, AI, and other emerging technologies
Translate complex cybersecurity and technology risks into clear, business-focused insights for senior management and the Audit Committee
Manage the Cybersecurity & IT audit budget and resources, including co-source and specialist support as needed, and help build and develop audit talent as the team grows
Drive innovation and continuous improvement in Internal Audit, including risk-based methodology, data analytics, automation, and AI-enabled audit techniques

Examples of desirable skills, knowledge, and experience

10–15 years of experience in Cybersecurity and IT Audit, including risk assessment, control evaluation, hands-on audit execution, and strategic advisory across IT environments
Strong knowledge of cybersecurity and technology frameworks (NIST CSF, ISO 27001, COBIT) and EU and UK requirements such as DORA, NIS2, GDPR, and the EU AI Act
Strong IT SOX experience, including ITGC scoping, oversight of third-party testing, and external auditor reliance
Strong understanding of cybersecurity and technology risks across areas such as ITGCs, cloud security, identity and access management, data protection and privacy, encryption, vulnerability management, network security, incident response, technology resilience, third-party risk, and AI and emerging technologies
CISSP, CISA, CIA, CISM, or CRISC preferred
Strong leadership and people skills, including experience in developing talent, driving continuous improvement, and building trusted relationships across all levels of the organization