Manager - IT Audit Services

Important Application Submission Information

Build an exciting, rewarding career with us - help us make a difference for millions of people every day. Consider joining the Duke Energy team, where you'll find a friendly work environment, opportunities for growth and development, recognition for your work, and competitive pay and benefits.

Duke Energy, the largest electric power holding company in the United States, is committed to making life better for millions of people every day - brighter, more convenient, more comfortable, more efficient, more productive and more sustainable. At Duke Energy, you'll find exciting roles, competitive compensation and benefits, recognition, growth opportunities and great work-life balance.

Duke Energy's Corporate Audit Services Department delivers world-class internal audit services that enable Duke Energy to achieve superior performance. You will work in high-performing teams that add value, drive effective risk management, and facilitate constructive change while also focusing on employee and professional development.

The Manager, IT Audit Services is a member of the Corporate Audit Services (CAS) leadership team and is responsible for leading risk-based IT, cybersecurity, and emerging technology audits across the enterprise. While primarily responsible for leading IT and cybersecurity audits, the manager may also oversee financial, operational, compliance, and technology-enabled audits based on enterprise risk priorities.

This position reports administratively to a Director, Corporate and IT Audit and is located in Charlotte, NC . Travel will be required, up to approximately 15% annually.

Responsibilities and Duties:

Leadership & Talent Development

• Support the Corporate Audit Services leadership team in building and sustaining a high-performing team.
• Advance the department's talent strategy through recruiting, developing, and mentoring employees.
• Execute the strategic and operational initiatives of a high-performing internal audit function

Audit Strategy & Planning

• Develop risk-based IT and cybersecurity audit plans that support both near-term and long-term audit coverage across the enterprise.

* Adjust audit priorities and resource plans in response to changing business strategies, regulations, threat conditions, technologies, and risk exposures.

Audit Execution & Quality

• Plan and manage internal audit efforts including establishing and executing appropriate audit approaches and methods.
• Ensure high quality audit results and well-crafted audit report deliverables while remaining mindful of executing within prescribed time budgets.

* Ensure audit work complies with the Global Internal Audit Standards, departmental methodology, and applicable quality expectations.

Collaboration & Operational Effectiveness

• Ensure complete communication and seamless coordination within Corporate Audit Services to maximize effectiveness, efficiency and consistency across the function.
• Foster collaboration within the department, management and project teams.

Stakeholder & External Auditor Engagement

• Build and maintain effective relationships within business segment executives and other personnel.
• Coordinate technology-related assurance activities with other assurance providers, external auditors, and regulatory bodies, as appropriate.

Industry & Technical Knowledge

• Maintain an understanding of the Company's strategic objectives, business priorities, and evolving industry risks to ensure audit activities remain aligned with enterprise needs.
• Maintain awareness of emerging cybersecurity threats, technology trends, and digital transformation initiatives affecting the Company.

Data Analytics, Automation, and Innovation

• Champion the use of data analytics, visualization, automation, and AI-enabled audit techniques to improve audit quality, efficiency, and coverage.
• Identify opportunities to use data and technology throughout risk assessment, planning, testing, reporting, and continuous monitoring.
• Drive improvements in audit methods, tools, quality, productivity, and stakeholder value.

Key skills/experience to be successful in this role

• Demonstrated experience leading complex audit, risk, compliance, or technology-related initiatives.
• Strong understanding of IT governance, cybersecurity, technology controls, and risk management frameworks.

Basic/Required Qualifications

• Bachelor's degree in Computer Science, Management Information Systems, Information Technology, Cybersecurity, Engineering, Accounting, Business

Administration, Economics, Data Science, Artificial Intelligence, or a related discipline.

• Eight (8) or more years of relevant professional experience in IT auditing, cybersecurity, technology risk management, information security, public accounting, consulting, or a related field.

Desired Qualifications

Professional Experience

• Two (2) or more years of IT audit management or supervisory experience.
• Experience within a large public accounting, consulting, utility, energy, or highly regulated organization.
• Experience auditing cloud technologies, cybersecurity programs, data governance, digital transformation initiatives, and emerging technologies.

Artificial Intelligence & Data Analytics

• Experience auditing, assessing, or governing artificial intelligence, machine learning, generative AI, advanced analytics, or algorithmic decision-making processes.
• Understanding of AI governance frameworks, model risk management principles, responsible AI practices, and applicable regulatory requirements.
• Experience utilizing data analytics, automation, visualization, and AI tools to enhance audit coverage and efficiency.
• Familiarity with technologies such as Generative AI, large language models (LLMs), machine learning, predictive analytics, and AI-enabled business applications.

Education & Certifications

• Advanced degree such as an MBA, Master's in Information Systems, Cybersecurity, Data Analytics, Data Science, Artificial Intelligence, or related field.
• One or more professional certifications, including:
  • CISA (Certified Information Systems Auditor)
  • CISSP (Certified Information Systems Security Professional)
  • CISM (Certified Information Security Manager)
  • CRISC (Certified in Risk and Information Systems Control)
  • CIPP (Certified Information Privacy Professional)
  • PMP (Project Management Professional)
  • CIA (Certified Internal Auditor)
  • Relevant AI, Data Science, Cloud, or Analytics certifications

Leadership Competencies

• Demonstrated success leading teams through organizational and technological change.
• Demonstrated verbal, written, and executive communication skills.
• Ability to influence and collaborate effectively across all levels of the organization.
• Strong business acumen, critical thinking, and strategic decision-making skills.
• Proven ability to build partnerships, resolve conflict, and drive results in a complex environment.

Mobility Classification - Hybrid

#LI-PG1

#LI-Hybrid

Travel Requirements

Privacy

Do Not Sell My Personal Information (CA)

Terms of Use

Accessibility