Senior IT Auditor

At Moodys, we unite the brightest minds to turn todays risks into tomorrows opportunities. We do this by striving to create an inclusive environment where everyone feels welcome to be who they are—with the freedom to exchange ideas, think innovatively, and listen to each other and customers in meaningful ways. Moodys is transforming how the world sees risk. As a global leader in ratings and integrated risk assessment, were advancing AI to move from insight to action—enabling intelligence that not only understands complexity but responds to it. We decode risk to unlock opportunity, helping our clients navigate uncertainty with clarity, speed, and confidence.

If you are excited about this opportunity but do not meet every single requirement, please apply! You still may be a great fit for this role or other open roles. We are seeking candidates who model our values: invest in every relationship, lead with curiosity, champion diverse perspectives, turn inputs into actions, and uphold trust through integrity.

Skills And Competencies

• Minimum 4 years of experience in IT audit, technology risk, controls, or related assurance functions
• Strong understanding of Application Controls and IT General Controls (ITGCs), including controls across the Software Development Lifecycle (SDLC), Agile, DevOps, and DevSecOps environments
• Knowledge of access management, cybersecurity, data protection risks, and associated control frameworks
• Excellent analytical, problem-solving, and stakeholder communication skills, with the ability to translate technical findings into business risk insights
• Proficiency in Microsoft Office applications and familiarity with GenAI and Agentic AI tools such as Microsoft Copilot, Claude, or similar technologies
• Experience using data analytics techniques, including Excel-based analysis (pivot tables, lookups, reconciliations, and large data sets), with a strong interest in leveraging automation and emerging technologies to improve audit effectiveness

• Bachelors degree in Cybersecurity, Computer Science, Computer Engineering, Information Technology, or a related field
• Professional certifications such as CISA, CISSP, CIA, or progress toward obtaining one are preferred

• Lead and execute technology-focused audit engagements with limited supervision, assessing risks, evaluating controls, and identifying opportunities to strengthen governance and operational effectiveness
• Support all phases of the audit lifecycle, including planning, risk assessment, control testing, issue validation, reporting, and follow-up activities
• Evaluate technology, cybersecurity, data security, and access management controls across a broad range of systems, applications, and infrastructure environments
• Partner with business and technology stakeholders to challenge control design, communicate audit observations, and develop practical, risk-based recommendations
• Apply data analytics, automation, and technology-enabled auditing techniques to improve audit coverage, efficiency, and insight generation
• Translate technical audit findings into clear business risks and actionable recommendations for senior leadership and governance committees
• Contribute to innovation within Internal Audit by supporting the adoption of analytics, automation, AI, and continuous monitoring capabilities
• Maintain compliance with Internal Audit standards, methodologies, professional ethics, and regulatory requirements while fostering a culture of integrity and continuous improvement

The Internal Audit team provides independent assurance that Moodys technology, risk management, and control environments operate effectively to support the organizations strategic objectives. The team works across a diverse range of businesses, technologies, and emerging risks, partnering with stakeholders to enhance governance, strengthen controls, and drive continuous improvement. As Moodys accelerates its use of AI, automation, and advanced analytics, the team plays a key role in assessing risk, enabling innovation, and helping the organization navigate an increasingly complex technology landscape with confidence

Moodys is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, protected veteran status, sexual orientation, gender expression, gender identity or any other characteristic protected by law.

Candidates for Moodys Corporation may be asked to disclose securities holdings pursuant to Moodys Policy for Securities Trading and the requirements of the position. Employment is contingent upon compliance with the Policy, including remediation of positions in those holdings as necessary.