IT Audit Manager

Title: IT Audit Manager IT Audit Manager KBR — Delivering Solutions, Changing the World. KBR is a global leader in delivering science, technology, and engineering solutions to governments and top tier commercial clients to overcome tomorrow’s challenges, always maintaining our commitment to Zero Harm. With a full portfolio of services, proprietary technologies and expertise, our approximately 37,000 employees are ready to handle projects and missions throughout their entire lifecycle, from planning and design to sustainability and maintenance. Whether at the bottom of the ocean or in outer space, our clients trust us to deliver the impossible on a daily basis. Audit and Advisory Services at KBR plays a trusted role in supporting the company’s governance, risk management, and control environment through independent assurance and practical advisory insights. The team partners across the business to evaluate key risks, strengthen processes, and provide objective perspectives that help KBR operate with integrity, accountability, and continuous improvement.

Section The IT Audit Manager is responsible for leading and executing KBR's IT audit and IT SOX compliance activities. This role provides independent assurance and advisory support across information technology processes, systems, and emerging technology risks while overseeing the annual IT SOX compliance program. The IT Audit Manager leads risk assessments, develops audit plans, manages audit and SOX engagements, supervises audit staff and third-party resources, and partners with management to evaluate and improve the effectiveness of governance, risk management, cybersecurity, system development lifecycle (SDLC), and internal control processes. This position requires strong leadership, technical IT audit expertise, project management skills, and the ability to communicate effectively with stakeholders across all levels of the organization.

Lead the planning and execution of the annual IT audit plan and IT SOX compliance program, including risk assessments, audit scoping, resource planning, and engagement oversight. Manage and execute technology-focused audits, SOX activities, advisory engagements, investigations, and special projects across the organization. Oversee the evaluation of IT General Controls (ITGCs), IT Application Controls (ITACs), SDLC controls, automated controls, interface controls, reports, and other technology-related controls. Assess technology, cybersecurity, operational, and compliance risks and provide independent assurance and advisory support to management. Develop and maintain the annual IT audit universe and risk assessment process to identify and prioritize audit activities across technology, cybersecurity, digital transformation, and regulatory compliance areas. Develop risk-based audit approaches and communicate observations, conclusions, and recommendations that support informed risk and business decisions. Lead, mentor, and supervise internal audit staff, contractors, and co-sourced resources while ensuring consistent application of audit methodologies and quality standards. Review audit documentation, testing results, and workpapers to ensure accuracy, completeness, and compliance with internal audit standards. Partner with IT management, business process owners, Internal Controls, and external auditors to support audits, SOX compliance activities, and audit reliance requirements. Assess control deficiencies, support remediation planning, validate corrective actions, and communicate significant risks and issues to management. Support major technology initiatives, system implementations, cloud transformations, and other strategic projects through risk and control advisory services. Drive continuous improvement through data analytics, automation, AI-enabled technologies, and technology-enabled audit techniques. Stay current on emerging technology risks, cybersecurity trends, regulatory developments, and leading