Internal Audit Manager (technology)

F5 F5 · Enterprise · Seattle, WA

This role is for an Internal Audit Manager focused on technology and cybersecurity risk. The primary responsibilities include leading risk-based internal audit engagements, assessing controls across various technology domains (cloud, cybersecurity, IAM, network, logging, SDLC), and providing actionable insights and recommendations. The role requires strong analytical skills, intellectual curiosity, and the ability to translate complex technical concepts for different audiences. While the company uses AI and the role mentions "AI-enabled audit techniques" as a preferred qualification, the core function is traditional IT audit and risk management, not building or directly working with AI models.

What you'd actually do

  1. Own the end‑to‑end execution of assigned technology and cybersecurity audit engagements, from detailed planning through fieldwork, reporting, and issue follow‑up
  2. Lead risk‑based audit scoping and develop audit workplans and testing strategies aligned to key risks, system architecture, and business context
  3. Assess the design and operating effectiveness of controls across complex technology domains, including:
  4. Apply professional skepticism and technical judgment to move beyond standard audit procedures, identifying root causes, control gaps, and emerging or non‑obvious risks
  5. Conduct deep‑dive interviews and walkthroughs with engineering, security, and platform teams to understand how systems operate in practice and where risk trade‑offs exist

Skills

Required

  • Strong understanding of technology and cybersecurity risk domains, including cloud‑based architectures and modern application environments
  • Ability to independently execute complex audits within a defined scope while exercising sound professional judgment
  • Demonstrated analytical skills with the ability to connect technical control gaps to broader business, customer, and operational impact
  • Intellectual curiosity and willingness to challenge assumptions, ask difficult questions, and explore areas of uncertainty
  • Ability to translate complex technical concepts into clear, actionable insights for varied audiences
  • Strong written and verbal communication skills, particularly in drafting concise, high‑quality audit reports
  • Ability to build trusted relationships with stakeholders while maintaining independence and objectivity
  • Strong organizational skills with the ability to manage priorities, deadlines, and competing demands
  • High level of integrity, professionalism, and accountability
  • 8+ years of experience in IT audit, technology risk, cybersecurity, or related disciplines within a public accounting firm, public company, or technology‑focused organization
  • Experience leading or owning technology audit engagements, including cybersecurity, cloud, infrastructure, or system implementations

Nice to have

  • Professional certifications preferred: CISA, CISSP
  • Other relevant certifications considered: CIA, CPA, CISM, CCSP, CRISC
  • Experience in a global technology, SaaS, or cloud‑native environment
  • Exposure to DevOps or DevSecOps practices and secure product development
  • Familiarity with data analytics, automation, or AI‑enabled audit techniques

What the JD emphasized

  • inherently curious
  • dig deeply into complex environments to understand how risk truly manifests
  • modern, technology‑enabled Internal Audit function