Manager, IT Internal Audit

FactSet creates flexible, open data and software solutions for over 200,000 investment professionals worldwide, providing instant access to financial data and analytics that investors use to make crucial decisions.

At FactSet, our values are the foundation of everything we do. They express how we act and operate, serve as a compass in our decision-making, and play a big role in how we treat each other, our clients, and our communities. We believe that the best ideas can come from anyone, anywhere, at any time, and that curiosity is the key to anticipating our clients’ needs and exceeding their expectations.

Your Impact

The Manager, IT Internal Audit is a key contributor within the Internal Audit function, reporting to the Associate Director, IT Internal Audit. This role is responsible for planning, coordinating, and executing risk-based IT audits, including assessments of IT General Controls (ITGCs), application controls, cybersecurity, infrastructure, and other technology-related risk areas. The Manager works closely with IT and business stakeholders to evaluate control design and operating effectiveness, document findings, and ensure timely delivery of audit deliverables.

This role also supports business process audits by providing technology subject matter expertise, evaluating automated controls, system dependencies, and IT-related risks within broader business audit objectives. The Manager, IT Internal Audit serves as a collaborative partner to IT, Finance, external auditors, and business management, supporting SOX ITGC compliance efforts, monitoring remediation activities, and driving continuous improvements in audit quality and operational efficiency.

Location: New York City, Norwalk, CT, Boston, MA (Hybrid)

What You'll Do

IT Audit Planning & Execution

• •Plan, coordinate, and execute IT audits including scoping, fieldwork, review, and reporting
• •Assess ITGCs, application controls, automated controls, cybersecurity, and infrastructure risks in accordance with established methodologies
• •Perform substantive technical testing (access reviews, configuration analysis, cloud architecture, data analytics, artificial intelligence) when control gaps or ambiguity require going beyond standard control evaluation
• •Review workpapers, testing conclusions, and supporting documentation to ensure accuracy, consistency, and quality
• •Partner with Internal Audit leadership and stakeholders to develop annual audit plans aligned with organizational risk priorities
• •Identify emerging technology risks and recommend modifications to audit coverage and procedures

Business Audit Support

• •Support business process audits by identifying and evaluating technology components, automated controls, and system dependencies embedded within business operations
• •Provide subject matter expertise on technology-related risks within the broader context of business audit engagements

Team Leadership & Development

• •Lead, mentor, and develop audit team members responsible for IT testing
• •Manage workload balancing, performance management, and resource planning across the IT audit portfolio

Stakeholder Management & Communication

• •Build and maintain strong relationships with IT management, control owners, business leaders, Finance, and external auditors
• •Communicate audit findings and control deficiencies clearly and effectively to both technical and non-technical audiences
• •Support external auditor interactions by providing relevant documentation and assisting with SOX IT reliance activities

Issue Management & Remediation

• •Oversee the identification, documentation, and evaluation of IT control deficiencies and audit findings
• •Monitor remediation activities, validate corrective actions, and report on finding trends and overall IT control environment health

SOX & Compliance Support

• •Support SOX ITGC testing efforts, coach control owners, and help maintain high-quality workpaper documentation to facilitate external auditor reliance
• •Contribute to maintaining consistency in audit methodologies and compliance standards across the organization

What We're Looking For

Required Skills

• •Bachelor's degree in Information Systems, Information Technology, Accounting, Computer Science, Cybersecurity, or a related field
• •5+ years of progressive experience in IT Audit, Internal Audit, External Audit, SOX compliance, or a related assurance function
• •Experience supporting or managing audit teams and executing IT audit portfolios, preferably within a publicly traded organization
• •Experience drafting audit scope memos, findings, and formal audit reports with clear, concise, and well-supported conclusions for both technical and non-technical audiences
• •Knowledge of ITGCs, application controls, automated controls, cybersecurity, and infrastructure risk concepts
• •Hands-on experience assessing technical infrastructure including network architecture and security, database platforms, cloud environments (AWS, Azure, or GCP), and emerging technologies such as AI/ML systems
• •Familiarity with financial reporting processes and the intersection of technology and internal controls over financial reporting
• •Strong project management, analytical, problem-solving, and stakeholder management skills
• •Ability to communicate effectively with senior leaders, IT management, control owners, and external auditors on both technical and non-technical topics
• •Must be legally authorized to work in the United States without the need for employer sponsorship, now or at any time in the future

Desired Skills

• •CIA, CISA, CISSP, or other relevant professional certification
• •Knowledge of ERP platforms such as Workday, Oracle, or SAP
• •Experience with GRC platforms and audit management tools
• •Experience leveraging data analytics, automation, and continuous monitoring to enhance audit effectiveness and efficiency
• •Demonstrated ability to contribute to process improvement and control optimization initiatives within an audit or assurance function

What's In It For You

At FactSet, our people are our greatest asset, and our culture is our biggest competitive advantage. Being a FactSetter means:

The opportunity to join an S&P 500 company with over 45 years of sustainable growth powered by the entrepreneurial spirit of a start-up.

Support for your total well-being. This includes health, life, and disability insurance, as well as retirement savings plans and a discounted employee stock purchase program, plus paid time off for holidays, family leave, and company-wide wellness days.

Flexible work accommodations. We value work/life harmony and offer our employees a range of accommodations to help them achieve success both at work and in their personal lives.

A global community dedicated to volunteerism and sustainability, where collaboration is always encouraged, and individuality drives solutions.

Career progression planning with dedicated time each month for learning and development.

Business Resource Groups open to all employees that serve as a catalyst for connection, growth, and belonging.

Learn more about our benefits here .

Salary is just one component of our compensation package and is based on several factors including but not limited to education, work experience, and certifications.

The budgeted amount range for this position in NYC and the State of Connecticut is $128k - $160K

Company Overview:

FactSet ( NYSE:FDS | NASDAQ:FDS ) helps the financial community to see more, think bigger, and work better. Our digital platform and enterprise solutions deliver financial data, analytics, and open technology to more than 8,200 global clients, including over 200,000 individual users. Clients across the buy-side and sell-side, as well as wealth managers, private equity firms, and corporations, achieve more every day with our comprehensive and connected content, flexible next-generation workflow solutions, and client-centric specialized support. As a member of the S&P 500, we a