Internal Audit - Manager (Remote)

FICO (NYSE: FICO)   is a leading global analytics software company, helping businesses in 100+ countries make better decisions. Join our world-class team today and fulfill your career potential! The Opportunity Join our top-notch risk and assurance team within a global, fast-growing and progressive data analytics and cutting-edge AI oriented software company. If you’re eager to feel empowered and apply your creativity and experience in a way that adds value and serves to mitigate business risks across the enterprise, this is the opportunity for you. This is a hands-on lead role. You will own the IT audit coverage for a defined portfolio of FICO’s financial applications, cloud platforms and security tooling — running engagements end to end, setting the testing approach, and raising the bar on how we use data, automation and AI to get assurance. What You’ll Contribute Lead IT audit engagements end to end with limited supervision — scoping and risk assessment, walkthroughs, design and operating effectiveness testing, issue development, and remediation validation. Own the Sarbanes-Oxley Section 404 (SOX 404) IT general controls program for an assigned portfolio of in-scope financial applications and supporting infrastructure, spanning access to programs and data, change management, program development, and IT operations. Test IT application controls, key reports, interfaces and system-generated data supporting financial reporting across our ERP and other in-scope financial applications. Perform annual and ad-hoc segregation of duties (SoD) analysis. This is data-driven work: extracting role and entitlement data from source systems, normalizing and deduplicating it, applying and maintaining a conflict ruleset, identifying conflicting access combinations and privileged access exceptions, and working with process owners to validate, justify or remediate what surfaces. A standing goal for this role is to automate the extraction, normalization and comparison steps so the analysis becomes a repeatable, monitorable process rather than a once-a-year manual exercise. Audit identity and access management across the enterprise — directory services, enterprise single sign-on, identity governance and access certification platforms, and privileged access and secrets management tooling (password vaults and safes) — covering joiner/mover/leaver provisioning, privileged access, and periodic user access reviews. Evaluate change and release management controls across modern DevOps toolchains — Git-based source control, CI/CD pipelines, and IT service management platforms such as Jira and ServiceNow — including automated approvals and separation of duties between development and production. Assess controls over cloud infrastructure and enterprise data platforms, covering configuration, encryption, logging and monitoring, and data pipeline integrity. Perform cybersecurity and cloud security assessments across FICO’s SaaS product environments…