IT Audit Manager – SOC 1 / SOC 2 / ISAE 3402

About the role

The Third Party Assurance team at Forvis Mazars helps clients build trust through independent SOC 1, SOC 2 and ISAE 3402 reporting. We are looking for an experienced IT Audit Manager to lead these engagements, combine technical IT security knowledge with client‑focused facilitation, and mentor a team of auditors.

Key responsibilities

• Lead SOC 1, SOC 2 and ISAE 3402 audits from planning through delivery.
• Review design and operating effectiveness of IT controls.
• Ensure audit delivery meets quality standards, timelines and budgets.
• Conduct client workshops to define scope, identify control objectives and clarify system boundaries.
• Manage client relationships as the primary point of contact.
• Mentor and review work of junior team members.
• Identify risks, ensure adherence to audit standards, and support business development.

Required profile

• Fluent English and professional services experience.
• 4–8 years of experience in IT audit, IT controls, cyber security or IT risk.
• Proven ability to lead structured client workshops.
• Strong understanding of how IT controls integrate with broader business processes.
• Relevant bachelor’s degree in a technical discipline.
• Professional certifications such as CISA, CISSP or CISM, or cloud‑controls experience.

Required skills

• CISA
• CISSP
• CISM
• AWS
• Azure
• GCP
• Access management
• Network security
• Monitoring
• Patching
• Incident management