Director, Technology Risk Assurance

NeighborWorks as a Company and an Employer

Picture yourself in a collaborative, diverse hybrid environment surrounded by colleagues who challenge, encourage and inspire you to support mission-driven work. This opportunity includes a competitive total rewards package with a 401(k) match of up to 12%, 11 paid holidays, generous leave (including 40 hours of paid volunteer time) and industry-leading benefits. Begin your career with NeighborWorks® America and gain access to our Staff Training and Education Program (STEP), designed to support your continued growth and development. Our benefits are structured to support a balanced, fulfilling life, empowering staff to bring their best selves to work each day.

For over 45 years, Neighborhood Reinvestment Corp., a national, nonpartisan nonprofit organization known as NeighborWorks America, has worked to make every community a place of opportunity. Our network includes nearly 250 organizations in every state, the District of Columbia and Puerto Rico. NeighborWorks America provides grant funding, peer exchange, technical assistance, evaluation tools and professional learning as the nation's leading trainer of housing and community development professionals. NeighborWorks network organizations serve their communities with affordable homes—owned and rented—financial counseling and coaching, resident-led community building and partnerships in health, employment and education.

We are a mission-based organization committed to building a high-performing work culture, guided by the following core values:

• We hold ourselves and each other accountable.

• We act with integrity.

• We lead with curiosity.

• We pursue excellence with courage.

• We respect, honor and celebrate each other.

• We collaborate with purpose.

Work at a Glance: Strategic advisor on technology, cybersecurity, AI, and regulatory risk.

Position Summary:

Reporting to the Chief Audit Executive, the Director Technology Risk Assurance leads the organization's technology risk assurance activities, including the identification and assessment of technology risk, cybersecurity, cloud, data governance, AI governance, and information assurance audit activities. The Director develops and executes a risk-based technology audit strategy and multi-year technology risk assurance roadmap that provides independent assurance regarding the effectiveness of governance, risk management, and internal controls across the organization's technology environment.

The position serves as the primary subject matter expert for technology-related risks and provides strategic guidance to the Chief Audit Executive regarding cybersecurity, cloud computing, infrastructure, application controls, emerging technologies, artificial intelligence, and regulatory compliance. The Director leverages data analytics, continuous auditing techniques, and where feasible AI-enabled audit tools to improve audit efficiency and effectiveness while ensuring alignment with professional standards and leading frameworks including NIST, COBIT, COSO, AI governance frameworks, and IIA standards.

Essential Duties/Responsibilities:

· Lead the development and execution of a comprehensive risk-based Technology Risk Assurance program, including cybersecurity, cloud, data governance, artificial intelligence, and IT governance audits.

· Collaborate with the Chief Audit Executive to identify emerging technology risks and incorporate them into annual and strategic audit plans. Develop recommendations regarding long-term technology risk assurance priorities and audit coverage.

· Evaluate the effectiveness of IT governance, cybersecurity, privacy, resilience, disaster recovery, cloud security, identity management, and technology risk management controls.

· Assess compliance with applicable standards and frameworks including NIST, COBIT, COSO, ISO 27001, CIS Controls, and industry best practices.

· Provide assurance over AI governance, responsible AI practices, model risk management, and compliance with emerging AI regulations and frameworks.

· Prepare and present technology audit results, emerging risk assessments, and key observations to executive leadership and for the Audit Committee as appropriate.

· Leverage technology, data analytics, automation, and AI tools to enhance audit coverage and efficiency.

· Engage in enterprise-wide technology risk assessments and provide recommendations to strengthen governance, risk management, and internal controls. Partner with business and technology leaders to promote effective risk management practices across the organization.

· Monitor remediation activities and validate management action plans related to technology audit observations (findings).

· Liaise with external auditors and the corporation’s information technology and services security as necessary. Lead outsourced and co-sourced technology internal audits. Provide oversight, direction, and performance feedback to external consultants and audit resources assigned to technology assurance projects.

· Provides functional leadership and oversight of co-sourced technology audit resources, external consultants, and project teams. May supervise internal technology audit staff as organizational needs evolve.

· Maintain and enhance technology audit methodologies, templates, quality assurance practices, and use of TeamMate+ audit management software. Stay current on emerging risks, evolving regulations, cybersecurity threats, AI developments, and leading audit practices. Champion the use of data analytics, automation, continuous auditing techniques, and AI-enabled tools to improve audit effectiveness and efficiency.

· Perform other duties as assigned by the Chief Audit Executive.

Nature of Work Contacts:

As part of the audit work activities and internal relationship building, maintains close contacts with the corporate staff, Executive Senior Management, Officers and staff of the Audit Committee Chair, Information and Technology Service, External Auditors, and Third-Party Service Providers.

Fiscal Responsibilities:

Responsible for planning, monitoring, and managing expenditures associated with technology:

· Co-sourcing arrangements

· Specialized consulting engagements

· Technology audit tools and software licenses

Required Minimum Qualifications:

(a) Education: Bachelor’s degree in computer science, cyber-security, Accounting, Business Administration, Information Systems Management, or other related fields (Master's degree preferred) and/or equivalent work experience.

(b) Experience:

· Minimum 8 years of progressive experience conducting IT audits, cybersecurity assessments, technology risk reviews, or information assurance engagements.

· Minimum 5 years leading technology audit engagements.

· Experience auditing cloud-based environments (AWS, Azure, Google Cloud) strongly preferred.

· Experience evaluating cybersecurity programs, technology governance, and emerging technology risks.

· Experience presenting audit results to executive management.

· Experience working in or with Internal Audit functions adhering to IIA Standards.

(c) Licenses, Certifications:

Required

Certified Information Systems Auditor (CISA)

Preferred

One or more of the following:

· Certified Internal Auditor (CIA)

· Certified Information Systems Security Professional (CISSP)

· Certified in Risk and Information Systems Control (CRISC)

· Certified Cloud Security Professional (CCSP)

· Certified Information Security Manager (CISM)

(d) Competencies, Knowledge, Skills & Abilities:

Technical Expertise

· Extensive knowledge of:

o NIST Cybersecurity Framework

o COBIT

o COSO Internal Control Framework

o AI Governance Frameworks

o IT General Controls (ITGCs)

o Application Controls

o Identity and Access Management

o Cloud Security

o Cybersecurity Governance

o Data Governance

o Vendor Risk Management

o Business Continuity and Disaster Recovery

Communication

· Exceptional written and verbal communication skills.

· Strong interpersonal and presentation skills, sufficient to build effective internal relationships;

· Ability to translate highly technical issues into business-focused observations and recommendations.

Data Analytics

· Ability to leverage technology to improve audit effectiveness and coverage.

(e) Technology: Microsoft Office Suite, Teammate (Preferred), Data Analytics tools (TM Analytics, SQL or similar) cloud Platforms (Azure, AWS, Google Cloud).

Preferred Qualifications:

A Master’s degree in information systems, Cyber security, accounting, business administration, data analytics or related field. Experience conducting Cloud, cybersecurity, AI governance and digital transformation audits. Experience implementing continuous auditing and continuous monitoring programs.

Some knowledge of affordable housing or community development industries is helpful but not required.

Working Conditions:

(a) Travel: Up to 25%

(b) Physical/Sensory Demands: Fast paced professional environment requiring periodic extended hours to meet audit deadlines. Significant computer usage and virtual collaboration.

Salary Range: $140,000-$158,000

The salary offered for the role will be based on a variety of factors, including geographic location, internal equity, and the candidate’s qualifications/professional experience.

Special Provisions: None specified.

Requisition Close Date: October 16, 2026, 5 p.m. ET

The use of artificial intelligence (AI) tools is strictly prohibited as candidates seeking employment with NeighborWorks America engage in our interview process. Prohibited uses of AI include but are not limited to, drafting and submitting misleading resumes, using or referencing AI-produced answers during any portion of our interview process, or using an AI notetaking tool. Candidates are welcome to take notes, but using AI is not permitted. Prohibited use of AI during the interview process will result in immediate disqualification. In compliance with the American with Disabilities Act, NeighborWorks America will consider reasonable accommodations requested by candidates seeking employment with our organization.