IT Internal Audit Manager
Posted Updated 4
views
Internal Audit‘s vision is be a trusted business advisor as it relates to our areas of expertise: Governance, Risk, and Control. We do this by monitoring the risk environment across Align and providing insights to enable effective risk management. As well as evaluate the efficiency, effectiveness and maturity of our processes and systems. We work closely with teams and leadership to achieve a strong control environment that enhances and protects organizational value. We serve the entire company from a compliance perspective and staff and develop our team to be control experts who deliver objective and reliable results.
Reporting to the VP of Global Internal Audit, the IT Internal Audit Manager leads the technology audit portfolio globally and serves as the department’s subject matter expert on IT, cybersecurity, and data. This leader plans and executes IT general controls (ITGC) and application control testing in support of SOX, delivers risk-based technology and cybersecurity audits, and advises on transformation initiatives where technology, data, and automation drive the outcome. The role blends deep technical audit expertise with business partnering: the successful candidate is equally comfortable challenging a cloud configuration, reviewing major ERP transformations, including relevant SDLC controls and briefing executives and the Audit Committee in plain language.
Reporting to the VP of Global Internal Audit, the IT Internal Audit Manager leads the technology audit portfolio globally and serves as the department’s subject matter expert on IT, cybersecurity, and data. This leader plans and executes IT general controls (ITGC) and application control testing in support of SOX, delivers risk-based technology and cybersecurity audits, and advises on transformation initiatives where technology, data, and automation drive the outcome. The role blends deep technical audit expertise with business partnering: the successful candidate is equally comfortable challenging a cloud configuration, reviewing major ERP transformations, including relevant SDLC controls and briefing executives and the Audit Committee in plain language.
IT Audit Planning and Execution
• Develop and maintain the annual IT audit plan using a risk-based approach, refreshed for emerging technology, cyber, and regulatory risk; align the plan with the enterprise risk management (ERM) program and the broader internal audit plan.
• Scope, lead, and deliver IT audits end to end — planning, risk and control matrices, fieldwork, issue development, reporting, and follow-up — in accordance with the IIA Global Internal Audit Standards.
• Lead audits across domains including cybersecurity, cloud (AWS/Azure/SaaS), identity and access management, change and release management, IT operations and resiliency, data privacy, IT third-party/vendor risk, and major system implementations and ERP transformations.
• Perform pre- and post-implementation reviews of significant technology programs, providing independent assurance on project governance, data conversion, cutover readiness, and control design.
SOX and Technology Controls
• Own the IT scope of the SOX program: ITGC scoping and risk assessment, control design evaluation, test plan development, testing execution, deficiency evaluation, and aggregation of IT findings with the financial statement audit.
• Evaluate and advise on automated controls, IT-dependent manual controls, key reports, and interface/data integrity controls within SAP and adjacent platforms.
• Coordinate directly with external auditors and process owners on scoping, reliance, evidence, and remediation timelines; drive efficiency through control rationalization and reliance strategies.
• Assess the control implications of emerging technologies, including AI/automation use cases, and advise management on appropriate governance, human oversight, and monitoring.
Cybersecurity and InfoSec Partnership
• Provide independent assessment of the information security program against recognized frameworks (NIST CSF, ISO 27001, CIS Controls), including vulnerability and patch management, logging and monitoring, incident response, and security awareness.
• Cultivate a collaborative, non-adversarial relationship with the CISO and InfoSec leadership; align audit coverage with the security roadmap while preserving independence and objectivity.
• Support ad hoc security reviews, penetration/attack-surface validation exercises, and readiness assessments as requested by management.
Analytics, Automation, and Continuous Auditing
• Build and scale data analytics across the audit lifecycle — full-population testing, anomaly detection, segregation-of-duties analysis, and continuous control monitoring — using tools such as Power BI, SQL, Python, or equivalent.
• Champion the use of automation and AI within the internal audit function to improve coverage, cycle time, and insight quality.
Investigations and Advisory
• Provide forensic and technical support to investigations, including data preservation, log and system analysis, and independent evaluation of findings, coordinating with Legal, HR, and Compliance.
• Advise business and IT leadership on control design for new processes and systems, maintaining an independent and objective perspective.
Leadership and Communication
• Mentor, coach, and develop audit staff and co-source/outsource resources; manage budgets, schedules, and quality across concurrent engagements.
• Communicate findings, root causes, business impact, and practical recommendations to senior management; negotiate management action plans with clear owners and due dates and track them to closure.
• Contribute materials and technology risk perspective to Audit Committee and executive reporting; represent the department in executive forums.
• Build and maintain strong cross-functional relationships across IT, Commercial, Finance, Legal, and Compliance.
- Bachelor’s degree in Information Systems, Computer Science, Accounting, Finance, or a related field, or equivalent experience.
- Master’s degree (MIS, Accounting, Finance, MBA) preferred.
- Minimum of 6+ years of IT audit, IT risk, or information security experience, including SOX ITGC ownership; Manager-level candidates will be considered with 6+ years.
- Prior experience in a leadership, supervisory, or advisory capacity; Big 4 or large-firm technology risk experience strongly preferred, ideally combined with in-house corporate audit experience.
- Experience in a global, publicly traded company; medical device, life sciences, or manufacturing industry experience is a plus.
- Technical depth: Working knowledge of ERP environments (SAP preferred) including security and authorization concepts, cloud platforms and shared-responsibility models, databases and operating systems, networking fundamentals, and SDLC/DevOps practices.
- Frameworks: Practical command of COSO, COBIT, NIST CSF, ISO 27001, and SOX 404 requirements; familiarity with data privacy regulations (GDPR, CCPA/CPRA, HIPAA).
- Analytical rigor: Excellent problem-solving skills with a proactive mindset; able to move from raw data to a defensible conclusion and a practical recommendation.
- Project leadership: Proven ability to manage multiple concurrent audits with precision, attention to detail, and on-time delivery.
- Communication: Strong written and verbal presentation skills; able to translate technical issues into business risk for non-technical executives.
- Collaboration: Team-oriented, credible, and influential without authority; fosters a positive, open working environment.
- Integrity: Demonstrated independence, objectivity, and sound judgment in sensitive and confidential matters.
Preferred Certifications
- CISA strongly preferred; CISSP, CRISC, CISM, CIA, CPA, or cloud certifications (AWS/Azure) are advantageous.
Tools and Technology
- Enterprise platforms and audit tooling such as SAP, ServiceNow, Workday, Salesforce, GRC/audit management systems, Power BI, SQL, Python, and the Microsoft 365 suite.
Work Schedule / Hours
- Regular business hours with flexibility based on project demands and global time zones.
- Ability and willingness to travel domestically and internationally, up to 20%.
If provided, base salary or wage rate ranges are the range in which Align reasonably expects to set a candidate’s pay for the posted position. Actual placement depends on the individual skills and experience level of a candidate plus the total compensation and equity across team members. For other locations outside of the primary location, the base salary range will be adjusted geographically.
For Field Sales roles, the salary listed is the base pay only and does not include the applicable incentive compensation plan. A cost of living adjustment may be added to base pay for higher cost areas in the U.S.
Our internship hourly rates are a standard pay determined based on the position and your location, year in school, degree, and experience.
General Description of All Benefits
General Description of All Benefits
We are pleased to provide a general description of the benefits Align offers to full-time employees in this position.
Family Benefits. Align offers employees and their eligible dependents medical (with a Health Savings Account option for some plan offerings), dental, and vision in accordance with those plans. Align also offers to employees:
- Discounts on Invisalign and Vivera to employees and their eligible dependents after 90 days of employment
- Back-up Child/Elder Care and access to a caregiving concierge
- Family Forming Benefits – Available to Employees, and their spouse or domestic partner, covered under one of Align’s health plans
- Breast Milk Delivery and Lactation Support Services
- Employee Assistance Program
- Hinge Health Virtual Physical Therapy – Available to all employees and eligible dependents (age 18+) enrolled in an Align medical Plan
Employee benefits. Align offers its employees:
- Short-term and long-term disability insurance in accordance with those plans.
- Basic Life Insurance and Accidental Death and Dismemberment. Voluntary Supplemental Life Insurance for Employee, Spouse/Domestic Partner, and Child(ren) are available for purchase in accordance with those plans.
- Flexible Spending Accounts – Employees may be eligible to participate in a health care account (including a limited health FSA if enrolled in a HDHP), dependent care account, and a pre-tax commuter benefit plan.
- 401k plan (with a discretionary Company match of 50% up to 6% of eligible earnings up to a maximum match of 3%.). Employer match vests after two years – 25% year one and 100% at year two. Align offers traditional, Roth, and after-tax options.
- Employee Stock Purchase Program (Employees must work 20 hours or more and be employed on purchase date to be eligible).
- Paid vacation of up to 17 days during the first full year of employment (currently accrued at the rate of 5.24 hours each pay-period), which carries over to a maximum cap of 30 days. Annual paid vacation time accrual increases based on tenure. Both exempt and non-exempt employees who work 32 hours or more per week receive prorated vacation accrual based on their regularly scheduled work hours and tenure.
- Sick time is accrued throughout the year at the rate of one hour for every thirty worked. Employees can carry over unused sick leave each year, up to a maximum balance of 80 hours.
- 11 Company-designated paid holidays throughout the year.
- If employed for at least 12 consecutive months, Align will grant up to 6 weeks of paid Parental Leave. If employed for less than 12 consecutive months, Align will grant up to 4 weeks of paid Parental Leave. All parental leave must be completed within one year of the birth or placement of the child. Parental leave is in addition to any state and/or local parental leave benefits. Three days of paid bereavement leave. In some cases, due to travel the amount of paid leave may be extended to 5 paid days off. To the extent applicable state or local law offers more generous benefits, Align complies with any such law.
- Non-exempt employees will receive full pay for up to 10 days of jury duty. Exempt employees will receive their full salary during any week they serve and perform any work. Other insurance such as legal, critical illness, voluntary accident, long-term care, auto, home and pet insurance are available for purchase.
To the extent applicable state or local law offers more generous benefits, Align complies with any such law.