Ict Audit Manager

The ICT Audit Manager is a senior-level role responsible for planning, executing, and reporting on information and communication technology audits across an organization. This position ensures that IT systems, processes, and controls are aligned with regulatory requirements, industry standards, and internal policies. The ICT Audit Manager leads a team of IT auditors, coordinates audit schedules, and communicates findings to senior management and stakeholders.

Key responsibilities include developing risk-based audit plans, assessing the effectiveness of IT general controls (e.g., access management, change management, backup and recovery), evaluating cybersecurity frameworks, and reviewing compliance with standards such as ISO 27001, GDPR, SOX, and PCI-DSS. The manager also oversees the use of audit management software, data analytics tools, and governance, risk, and compliance (GRC) platforms to streamline audit processes and enhance reporting accuracy.

Technical scope covers a wide range of IT domains: network security, cloud infrastructure, application controls, database management, identity and access management, and business continuity planning. The ICT Audit Manager must stay current with emerging technologies and threats, adapting audit methodologies accordingly. They collaborate closely with IT leadership, legal and compliance teams, and external auditors to ensure comprehensive coverage of risks.

Seniority signals: At junior levels, the role may focus on executing audit procedures under supervision; mid-level managers lead specific audits or small teams; senior managers oversee the entire audit function, set strategic direction, and influence organizational risk posture. The role is typically found in large enterprises, financial institutions, government agencies, consulting firms, and healthcare organizations.

Remote/hybrid fit: The role offers medium remote compatibility. While audit planning and reporting can be done remotely, on-site presence may be required for system walkthroughs, interviews, and control testing. Many organizations adopt a hybrid model.

Salary drivers: Experience, certifications (CISA, CISM, CISSP, CRISC), industry sector, company size, and geographic location significantly impact compensation. Managers in financial services and consulting tend to earn higher salaries.

Common stack signals: Familiarity with SAP, Oracle, AWS, Azure, Active Directory, SQL, and data analytics tools (e.g., ACL, IDEA) is advantageous.