Job Description:
Role Profile:
The Cyber and IT Audit Manager will oversee IT and cybersecurity audits, managing a team of auditors to assess IT processes and Operational Technology (OT) environments. The manager will ensure audits are aligned with the company’s strategic objectives and regulatory requirements, with a focus on delivering value and identifying critical risks in IT and cybersecurity. This role includes responsibility for overseeing security assessments and implementing audit methodologies that support continuous improvement.
Responsibilities:
'• Manage and execute a portfolio of IT and cybersecurity audits, focusing on complex audits related to IT general controls, cybersecurity frameworks, and OT environments.
• Oversee medium complexity security assessments for IT and OT systems, ensuring comprehensive audit coverage.
• Collaborate with the CAE, IT audit Director and IT stakeholders to build an audit pipeline, addressing emerging risks and identifying areas for process improvement.
• Lead the development of audit programs and methodologies, ensuring alignment with industry best practices and regulatory frameworks (e.g., NIST, COBIT, IEC 62443).
• Manage audit staff, providing guidance and ensuring adherence to professional standards (IIA, ITGC).
• Present audit findings to senior management, communicating risks, recommendations, and opportunities for improvement.
Qualifications:
'• 7+ years of experience in IT auditing, cybersecurity, and OT systems.
• Proven experience managing audits and teams, with a focus on IT governance, cybersecurity, and risk management.
• Expertise with security assessment tools (e.g., Nmap, Nessus, Kali Linux, Metasploit, Burp Suite) and audit methodologies for IT and OT systems.
• Strong understanding of industry frameworks (NIST, COBIT, ISO 27001, MITRE ATT&CK) and IEC 62443 for OT environments.
• OT knowledge and experience is highly desirable.
• Certifications such as CISSP, CISA, CISM, OSCP, OSWP, CRTP, CEH, HTB CPTS, HTB CBBH, HTB CWEE are preferred.
• Bachelor’s or Master’s degree in Information Technology, Cybersecurity, or related disciplines.
• Strong leadership, project management, and communication skills, with the ability to influence stakeholders at all levels.
At Nextracker, we are leading in the energy transition, providing the most comprehensive portfolio of intelligent solar tracker and software solutions for solar power plants, as well as strategic services to capture the full value of solar power plants for our customers. Our talented worldwide teams are transforming PV plant performance every day with smart technology, data monitoring and analysis services.
For us at Nextracker, sustainability is not just a word. It's a core part of our business, values and our operations. Our sustainability efforts are based on five cornerstones: People, Community, Environment, Innovation, and Integrity. We are creative, collaborative and passionate problem-solvers from diverse backgrounds, driven by our shared mission to provide smart solar and software solutions for our customers and to mitigate climate change for future generations.
Culture is our Passion