Role Snapshot
Lead information technology audit analytics and risk assessments across the university, evaluating technology controls, cybersecurity practices, and regulatory compliance to strengthen governance and operational effectiveness.
Key Responsibilities: Conduct IT audit analytics and continuous monitoring activities, develop audit methodologies and documentation, analyze technology risks and control weaknesses, and provide mentoring and subject matter expertise to the Internal Audit team.
Skills & Tools: Strong technical and analytical capabilities in IT auditing, cybersecurity, internal controls, and risk assessment; ability to translate complex technical findings into actionable recommendations; effective communication, leadership, and professional judgment.
Qualifications: Bachelor's degree required with 5 years of related experience in information technology auditing, internal controls, or cybersecurity risk assessment.
Compensation: $120K–$165K/yr (estimated)
Job Description
Advance Technology Risk Management and Audit Excellence Across the University
The University of Kentucky is seeking an Information Technology Auditor Principal to join the Internal Audit team.
This position plays a key role in evaluating technology-related risks, internal controls, cybersecurity practices, system configurations, and regulatory compliance across the university. The Information Technology Auditor Principal leads complex audit analytics and risk assessment activities, identifies opportunities for process improvement, and delivers actionable recommendations that strengthen governance, risk management, and operational effectiveness.
What You'll Do
The University of Kentucky is seeking an Information Technology Auditor Principal to join the Internal Audit team.
This position plays a key role in evaluating technology-related risks, internal controls, cybersecurity practices, system configurations, and regulatory compliance across the university. The Information Technology Auditor Principal leads complex audit analytics and risk assessment activities, identifies opportunities for process improvement, and delivers actionable recommendations that strengthen governance, risk management, and operational effectiveness.
What You'll Do
- Lead information technology audit analytics, continuous monitoring activities, and technology risk assessments.
- Develop and maintain analytical approaches to evaluate IT controls, cybersecurity risks, system configurations, regulatory compliance requirements, and emerging technology risks.
- Analyze trends, identify control weaknesses, and recommend risk mitigation and process improvement opportunities.
- Collaborate with audit leadership to support audit planning, engagement strategies, and risk-based prioritization of audit activities.
- Lead complex audit assignments and provide guidance to team members on technology-related risks and audit methodologies.
- Develop and maintain audit documentation, testing approaches, workpapers, and supporting evidence in accordance with professional standards.
- Serve as a subject matter resource on technology auditing, cybersecurity, analytics, and emerging technologies.
- Contribute to departmental initiatives and support technology infrastructure activities as needed.
What You'll Bring
- Strong technical, analytical, organizational, and planning skills.
- Knowledge of information technology auditing, cybersecurity concepts, internal controls, regulatory compliance, and risk assessment practices.
- Ability to translate complex technical findings into clear, actionable recommendations for stakeholders.
- Experience developing audit methodologies, maintaining high-quality workpapers, and supporting professional audit standards.
- Effective communication, leadership, problem-solving, and mentoring abilities.
- Initiative, professional judgment, ethical decision-making, and a commitment to continuous learning.
Minimum Requirements
- Bachelor's degree
- 5 years of related experience
What's In It for You
- Opportunity to help strengthen risk management, governance, and internal controls across a major research university.
- Exposure to a broad range of technology environments, cybersecurity challenges, and emerging technology risks.
- Ability to serve as a trusted advisor and technical resource within a collaborative Internal Audit team.
- Opportunities to advance expertise in information technology auditing, analytics, and professional audit practices.
- UK's Exceptional Benefits
Why Now?
As technology environments continue to evolve, the university relies on strong oversight of cybersecurity, regulatory compliance, and technology-related risks. This role provides critical support in identifying vulnerabilities, evaluating controls, and helping leadership make informed risk management decisions.
The Information Technology Auditor Principal will contribute to the continued advancement of Internal Audit by applying analytics, emerging technology knowledge, and professional auditing practices that strengthen institutional effectiveness and accountability.