Senior IT Auditor

Job Summary

Moody's, we unite the brightest minds to turn today's risks into tomorrow's opportunities. We do this by striving to create an inclusive environment where everyone feels welcome to be who they are-with the freedom to exchange ideas, think innovatively, and listen to each other and customers in meaningful ways. Moody's is transforming how the world sees risk. As a global leader in ratings and integrated risk assessment, we're advancing AI to move from insight to action-enabling intelligence that not only understands complexity but responds to it. We decode risk to unlock opportunity, helping our clients navigate uncertainty with clarity, speed, and confidence.

Job Details

• Experience level: Experienced Hire

• Job category: Corporate Services

• Line of business: AUDIT

  Skills and Competencies

• Minimum 4 years of experience in IT audit, technology risk, controls, or related assurance functions

• Strong understanding of Application Controls and IT General Controls (ITGCs), including controls across the Software Development Lifecycle (SDLC), Agile, DevOps, and DevSecOps environments

• Knowledge of access management, cybersecurity, data protection risks, and associated control frameworks

• Excellent analytical, problem-solving, and stakeholder communication skills, with the ability to translate technical findings into business risk insights

• Proficiency in Microsoft Office applications and familiarity with GenAI and Agentic AI tools such as Microsoft Copilot, Claude, or similar technologies

• Experience using data analytics techniques, including Excel-based analysis (pivot tables, lookups, reconciliations, and large data sets), with a strong interest in leveraging automation and emerging technologies to improve audit effectiveness

  Education

• Bachelor's degree in Cybersecurity, Computer Science, Computer Engineering, Information Technology, or a related field

• Professional certifications such as CISA, CISSP, CIA, or progress toward obtaining one are preferred

  Responsibilities

• Lead and execute technology-focused audit engagements with limited supervision, assessing risks, evaluating controls, and identifying opportunities to strengthen governance and operational effectiveness

• Support all phases of the audit lifecycle, including planning, risk assessment, control testing, issue validation, reporting, and follow-up activities

• Evaluate technology, cybersecurity, data security, and access management controls across a broad range of systems, applications, and infrastructure environments

• Partner with business and technology stakeholders to challenge control design, communicate audit observations, and develop practical, risk-based recommendations

• Apply data analytics, automation, and technology-enabled auditing techniques to improve audit coverage, efficiency, and insight generation

• Translate technical audit findings into clear business risks and actionable recommendations for senior leadership and governance committees

• Contribute to innovation within Internal Audit by supporting the adoption of analytics, automation, AI, and continuous monitoring capabilities

• Maintain compliance with Internal Audit standards, methodologies, professional ethics, and regulatory requirements while fostering a culture of integrity and continuous improvement

  About the Team

The Internal Audit team provides independent assurance that Moody's technology, risk management, and control environments operate effectively to support the organization's strategic objectives. The team works across a diverse range of businesses, technologies, and emerging risks, partnering with stakeholders to enhance governance, strengthen controls, and drive continuous improvement. As Moody's accelerates its use of AI, automation, and advanced analytics, the team plays a key role in assessing risk, enabling innovation, and helping the organization navigate an increasingly complex technology landscape with confidence

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.