DescriptionSummary / Objective American Credit Acceptance (ACA) is seeking a passionate and forward-thinking
IT Audit Manager to join our high-performing Internal Audit team. In this role, you will manage audits that strengthen our IT infrastructure, enhance risk management, and ensure compliance with industry standards. You'll work directly with IT and business leadership, overseeing audits across cybersecurity, cloud, IT governance, and more-all while developing your team and advancing your career. This role will report directly to the Chief Audit Executive.
This is a unique opportunity to combine your technical expertise, leadership skills, and strategic thinking to make a meaningful impact on ACA's success. If you're ready to lead, innovate, and grow, we invite you to join us.
Key Responsibilities - Lead IT Risk Management: Develop and maintain ACA's IT Risk Assessment, ensuring alignment with the company's strategic objectives.
- Drive Audit Excellence: Plan and execute risk-based IT audits, covering areas such as cybersecurity, cloud environments, patch management, change management, BCP/DR, and third-party risk.
- Build and Inspire Your Team: Oversee Audit staff, fostering a culture of collaboration, innovation, and continuous learning.
- Deliver Actionable Insights: Produce clear, concise, and impactful audit reports that provide value to both technical and non-technical stakeholders.
- Ensure Compliance: Manage regulatory, compliance, and operational audits, and collaborate with external auditors to optimize IT audit coverage.
- Innovate and Optimize: Identify opportunities to enhance ACA's IT processes, challenge the status quo, and recommend forward-thinking solutions.
- Stay Ahead of Emerging Risks: Maintain expertise in IT trends, technologies, and frameworks, and proactively adapt audit methodologies to address new challenges.
- Collaborate Across Teams: Partner with IT and business leaders to align on priorities, risks, and opportunities for improvement.
What You Bring Must-Haves: - Bachelor's degree in Computer Science, Information Systems, Accounting, or a related field (or equivalent work related experience).
- CISA or equivalent certification (or a commitment to obtain).
- 4+ years of internal/external IT audit, GRC, Quality Assurance, SOC experience with a mix of operational IT exposure a plus.
- Proven experience as a project lead, including risk assessment, planning, execution, and issue reporting.
- Strong knowledge of IT control frameworks (e.g., COBIT, NIST, ISO 27002) and associated risk areas.
- Exceptional communication and interpersonal skills for engaging with all levels of management.
- Ability to analyze complex risks, identify control gaps, and recommend practical solutions.
Nice-to-Haves: - Advanced certifications or multiple credentials (e.g., CPA, CISA, CISSP).
- Expertise in emerging technologies such as cloud platforms (AWS, Azure), virtualization, or cybersecurity.
- Familiarity with NYDFS, GLBA, CCPA compliance, PCI, SSAE 18/SOC.
- Audit Board or other GRC solution experience.
What We Offer - Professional Development: Support for certifications, conferences, and leadership training.
- Team Support: Work with a collaborative, engaged, and innovative team that values diversity and inclusion.
- Leadership Access: Collaborate directly with ACA's IT and business leadership to drive meaningful change.
- On-Site Perks: Access to professional office amenities, free parking, and team-building events.
Supervisory Responsibility This position includes direct management of Audit staff, including their day-to-day responsibilities, training, and career development.
Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities and activities may change at any time with or without notice.
