IT Audit Manager, Corporate Technology & Cybersecurity - HYBRID at First American in Santa Ana, CA

Job description

Who We Are Join a team that puts its People First! Since 1889, First American (NYSE: FAF) has held an unwavering belief in its people. They are passionate about what they do, and we are equally passionate about fostering an environment where all feel welcome, supported, and empowered to be innovative and reach their full potential. Our inclusive, people-first culture has earned our company numerous accolades, including being named to the Fortune 100 Best Companies to Work For® list for eleven consecutive years. We have also earned awards as a best place to work for women, diversity and LGBTQ+ employees, and have been included on more than 50 regional best places to work lists. First American will always strive to be a great place to work, for all. For more information, please visit www.careers.firstam.com. What We Do Leads complex, risk-based technology and cybersecurity audits from annual planning through reporting. Serves as the senior audit contact for client leadership, directs audit strategy and scope, confirms the work is complete and supportable, and presents results to senior management and examiners. Essential functions Lead executive-level discussions with technology, security, risk, finance, and business leaders, including the CTO, CISO, CRO, and their direct reports. Set expectations, resolve disagreements constructively, and communicate significant risks and conclusions. Set audit objectives, risk assessment, scope, criteria, resources, and timing. Challenge scope against the audit universe, enterprise architecture, regulations, prior findings, emerging technology, and dependencies to ensure complete coverage and supportable exclusions. Direct audits across the technology and cybersecurity programs identified in this profile. Apply deep technical audit judgment or bring in qualified subject-matter expertise where a specialized area requires it. Ensure audit scopes assess security-asset configuration and operation: baselines, rules/settings, privileged access, logging/monitoring, encryption, certificate lifecycle, changes, and exceptions. Direct and challenge configuration-focused audit coverage across the assigned specialty, including identity and privileged access, network security and segmentation, cloud security architecture and WAF, Security Operations monitoring and response, vulnerability management, or data-protection controls such as DLP, encryption, and key management. Oversee the Lead and audit team; review plans, walkthroughs, sampling, procedures, evidence, workpapers, issue evaluations, and reporting for quality and support. Own engagement decisions, issue severity/root cause, action plans, and reports. Escalate promptly and resolve differences while preserving audit independence. Present plans, status, results, and significant risks to Internal Audit leadership, executives, regulators, and examiners; keep examination materials complete and supportable. Coordinate with assurance teams and external auditors on reliance while protecting Internal Audit scope and conclusions. Coach auditors, build technical capability, manage concurrent-project resources and deadlines, and improve audit methods, continuous auditing, and analytics. Required qualifications At least 8 years of relevant experience, including leading complex IT or cybersecurity audits and advising on technology risks and controls. Experience must include leading operational cybersecurity or data-risk audits. Demonstrated experience managing teams and engaging senior client leadership is required. Extensive IT/cybersecurity audit leadership in one or more domains: Cyber Threat Intelligence (CTI)/threat hunting; Security Operations/incident response; endpoint/network security; data security/protection/privacy; insider risk/digital forensics; Offensive Security/penetration testing/application security; vulnerability/patch management; identity and access management; cloud security/service management (AWS, Microsoft Azure, Google Cloud Platform); P