Manager, IT Audit
Description
Summary / Objective
Shape the Future of IT Governance. Lead with Impact. Grow with Purpose.
American Credit Acceptance (ACA) is seeking a passionate and forward-thinking IT Audit Manager to join our high-performing Internal Audit team. In this role, you will manage audits that strengthen our IT infrastructure, enhance risk management, and ensure compliance with industry standards. You'll work directly with IT and business leadership, overseeing audits across cybersecurity, cloud, IT governance, and more—all while developing your team and advancing your career. This role will report directly to the Chief Audit Executive.
This is a unique opportunity to combine your technical expertise, leadership skills, and strategic thinking to make a meaningful impact on ACA’s success. If you're ready to lead, innovate, and grow, we invite you to join us.
Why Join Us?
- Impactful Leadership: Work directly with C-suite executives and IT leaders to influence ACA’s IT strategies and risk posture.
- Career Growth: Develop your team and your own expertise with opportunities for advanced certifications, professional development, and leadership training.
- Innovative Environment: Be part of an exceptional team that embraces change, values creativity, and leverages cutting-edge technology to enhance IT controls and governance.
- Team Culture: Join a collaborative, inclusive, and dynamic team that values your ideas and celebrates success.
- Competitive Benefits: Enjoy a comprehensive benefits package and on-site perks designed to support your career and well-being.
Key Responsibilities
- Lead IT Risk Management: Develop and maintain ACA’s IT Risk Assessment, ensuring alignment with the company’s strategic objectives.
- Drive Audit Excellence: Plan and execute risk-based IT audits, covering areas such as cybersecurity, cloud environments, patch management, change management, BCP/DR, and third-party risk.
- Build and Inspire Your Team: Oversee Audit staff, fostering a culture of collaboration, innovation, and continuous learning.
- Deliver Actionable Insights: Produce clear, concise, and impactful audit reports that provide value to both technical and non-technical stakeholders.
- Ensure Compliance: Manage regulatory, compliance, and operational audits, and collaborate with external auditors to optimize IT audit coverage.
- Innovate and Optimize: Identify opportunities to enhance ACA’s IT processes, challenge the status quo, and recommend forward-thinking solutions.
- Stay Ahead of Emerging Risks: Maintain expertise in IT trends, technologies, and frameworks, and proactively adapt audit methodologies to address new challenges.
- Collaborate Across Teams: Partner with IT and business leaders to align on priorities, risks, and opportunities for improvement.
What You Bring
Must-Haves:
- Bachelor’s degree in Computer Science, Information Systems, Accounting, or a related field (or equivalent work related experience).
- CISA or equivalent certification (or a commitment to obtain).
- 4+ years of internal/external IT audit, GRC, Quality Assurance, SOC experience with a mix of operational IT exposure a plus.
- Proven experience as a project lead, including risk assessment, planning, execution, and issue reporting.
- Strong knowledge of IT control frameworks (e.g., COBIT, NIST, ISO 27002) and associated risk areas.
- Exceptional communication and interpersonal skills for engaging with all levels of management.
- Ability to analyze complex risks, identify control gaps, and recommend practical solutions.
Nice-to-Haves:
- Advanced certifications or multiple credentials (e.g., CPA, CISA, CISSP).
- Expertise in emerging technologies such as cloud platforms (AWS, Azure), virtualization, or cybersecurity.
- Familiarity with NYDFS, GLBA, CCPA compliance, PCI, SSAE 18/SOC.
- Audit Board or other GRC solution experience.
What We Offer
- Professional Development: Support for certifications, conferences, and leadership training.
- Team Support: Work with a collaborative, engaged, and innovative team that values diversity and inclusion.
- Leadership Access: Collaborate directly with ACA’s IT and business leadership to drive meaningful change.
- On-Site Perks: Access to professional office amenities, free parking, and team-building events.
Supervisory Responsibility
This position includes direct management of Audit staff, including their day-to-day responsibilities, training, and career development.
Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities and activities may change at any time with or without notice.
EEO Statement
ACA provides equal employment opportunities (EEO) to all applicants for employment without regard to race, color, religion, gender, sexual orientation, gender identity or expression, national origin, age, disability, genetic information, marital status, amnesty, or status as a covered veteran in accordance with applicable federal, state and local laws. ACA complies with applicable state and local laws governing non-discrimination in employment in every location in which the company has facilities.
ACA provides equal employment opportunities (EEO) to all applicants for employment without regard to race, color, religion, gender, sexual orientation, gender identity or expression, national origin, age, disability, genetic information, marital status, amnesty, or status as a covered veteran in accordance with applicable federal, state and local laws. ACA complies with applicable state and local laws governing non-discrimination in employment in every location in which the company has facilities.
California Privacy Notice
As an employer of California residents, we are dedicated to protecting your privacy rights. Any personal information you provide during the application process will be used solely for permitted internal purposes and will be handled in accordance with applicable privacy laws. By applying to this position, you consent to the collection, use, and disclosure of your personal information as described in our Employee Privacy Notice.