Let's begin! Senior IT Auditor

At Moodys we unite the brightest minds to turn todays risks into tomorrows opportunities. We do this by striving to create an inclusive environment where everyone feels welcome to be who they arewith the freedom to exchange ideas think innovatively and listen to each other and customers in meaningful ways. Moodys is transforming how the world sees risk. As a global leader in ratings and integrated risk assessment were advancing AI to move from insight to actionenabling intelligence that not only understands complexity but responds to it. We decode risk to unlock opportunity helping our clients navigate uncertainty with clarity speed and confidence.

If you are excited about this opportunity but do not meet every single requirement please apply! You still may be a great fit for this role or other open roles. We are seeking candidates who model our values: invest in every relationship lead with curiosity champion diverse perspectives turn inputs into actions and uphold trust through integrity.

Skills and Competencies

• Minimum 4 years of experience in IT audit technology risk controls or related assurance functions
• Strong understanding of Application Controls and IT General Controls (ITGCs) including controls across the Software Development Lifecycle (SDLC) Agile DevOps and DevSecOps environments
• Knowledge of access management cybersecurity data protection risks and associated control frameworks
• Excellent analytical problem-solving and stakeholder communication skills with the ability to translate technical findings into business risk insights
• Proficiency in Microsoft Office applications and familiarity with GenAI and Agentic AI tools such as Microsoft Copilot Claude or similar technologies
• Experience using data analytics techniques including Excel-based analysis (pivot tables lookups reconciliations and large data sets) with a strong interest in leveraging automation and emerging technologies to improve audit effectiveness

Education

• Bachelors degree in Cybersecurity Computer Science Computer Engineering Information Technology or a related field
• Professional certifications such as CISA CISSP CIA or progress toward obtaining one are preferred

Responsibilities

• Lead and execute technology-focused audit engagements with limited supervision assessing risks evaluating controls and identifying opportunities to strengthen governance and operational effectiveness
• Support all phases of the audit lifecycle including planning risk assessment control testing issue validation reporting and follow-up activities
• Evaluate technology cybersecurity data security and access management controls across a broad range of systems applications and infrastructure environments
• Partner with business and technology stakeholders to challenge control design communicate audit observations and develop practical risk-based recommendations
• Apply data analytics automation and technology-enabled auditing techniques to improve audit coverage efficiency and insight generation
• Translate technical audit findings into clear business risks and actionable recommendations for senior leadership and governance committees
• Contribute to innovation within Internal Audit by supporting the adoption of analytics automation AI and continuous monitoring capabilities
• Maintain compliance with Internal Audit standards methodologies professional ethics and regulatory requirements while fostering a culture of integrity and continuous improvement

About the Team
The Internal Audit team provides independent assurance that Moodys technology risk management and control environments operate effectively to support the organizations strategic objectives. The team works across a diverse range of businesses technologies and emerging risks partnering with stakeholders to enhance governance strengthen controls and drive continuous improvement. As Moodys accelerates its use of AI automation and advanced analytics the team plays a key role in assessing risk enabling innovation and helping the organization navigate an increasingly complex technology landscape with confidence

Moodys is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race color religion sex national origin disability protected veteran status sexual orientation gender expression gender identity or any other characteristic protected by law.

Candidates for Moodys Corporation may be asked to disclose securities holdings pursuant to Moodys Policy for Securities Trading and the requirements of the position. Employment is contingent upon compliance with the Policy including remediation of positions in those holdings as necessary.