Sr. IT Audit Consultant

Important Application Submission Information

In order to ensure your application is successfully received before the job posting expires, please submit your application by 11:59 PM on Friday, November 20, 2026

More than a career - a chance to make a difference in people's lives.

Build an exciting, rewarding career with us – help us make a difference for millions of people every day. Consider joining the Duke Energy team, where you'll find a friendly work environment, opportunities for growth and development, recognition for your work, and competitive pay and benefits.

Duke Energy, the largest electric power holding company in the United States, is committed to making life better for millions of people every day - brighter, more convenient, more comfortable, more efficient, more productive, and more sustainable. At Duke Energy, you will find exciting roles, competitive compensation and benefits, recognition, growth opportunities, and great work-life balance.

Duke Energy's Corporate Audit Services Department delivers world-class internal audit services that enable Duke Energy to achieve superior performance. You will work in high-performing teams that add value, drive effective risk management, enhance operational efficiency, and facilitate constructive change while also focusing on employee and professional development.

The Senior IT Audit Consultant will serve as a member of the Corporate Audit Services Department of Duke Energy. This position will be based in Charlotte, NC. Travel may be required up to approximately 15%. This position will report administratively to an IT Audit Manager but will work in a matrix environment for increased career growth and diversity. The Senior IT Audit Consultant plans and executes risk-based audits and consulting engagements covering information technology, cybersecurity, emerging technologies, and technology-enabled business processes. The Senior IT Audit Consultant works in a team environment on audit activities that include performing risk assessments, developing risk-based audit scope and test plans, conducting interviews, gathering and analyzing data, preparing audit deliverables, communicating risks and issues, and performing follow-up procedures.

Mobility Classification - Hybrid (three days per week in office/onsite). This position requires that the successful candidate reside within a 50-mile radius of the position's designated location.

Travel Requirements

5-15%

Relocation Assistance Provided (as applicable)

No

Represented/Union Position

Visa Sponsored Position

No. This is not a Visa Sponsored Position. This role requires the ability to work lawfully in the U.S. without employment-based immigration sponsorship, now or in the future.

Please note that in order to be considered for this position, you must possess all of the basic/required qualifications.

Privacy

Do Not Sell My Personal Information (CA)

Terms of Use

Accessibility

Responsibilities

Plan and execute risk-based IT, cybersecurity, emerging technology, and technology-enabled audit and consulting engagements with limited supervision, including oversight of the day-to-day activities of assigned audit staff personnel, where applicable.; Develop audit objectives, scope, testing strategies, and procedures that appropriately address identified risks.; Evaluate the design and operating effectiveness of governance, risk management, and control processes using sound professional judgment and an appropriate level of professional skepticism.; Gather and analyze data, using reasoning and logic, to identify trends, assess risks, support audit conclusions, and develop practical recommendations.; Prepare clear, accurate, and well-supported audit documentation, observations, reports, and other engagement deliverables.; Monitor audit progress against established milestones, budgets, and quality expectations and exhibit a sense of urgency in completing assigned work.; Monitor and track the status of post-audit action plans and perform follow-up procedures to validate implementation and risk mitigation.; Demonstrate written and oral communication skills with the ability to tailor messages for varying audiences and levels of management.; Build and maintain effective relationships with audit customers, business leaders, subject matter experts, external auditors, and other assurance providers.; Participate in annual risk assessment processes, including identifying key technology, cybersecurity, and emerging risks and supporting development of the annual audit plan.; Maintain and leverage current knowledge of Duke Energy's strategic objectives, information technology, cybersecurity, data governance, privacy, emerging technologies, the energy industry, and leading practices.; Use data analytics, visualization, automation, and AI-enabled audit techniques to improve audit quality, efficiency, and coverage and contribute to improvements in audit methods and tools.

Requirements

Requires technical skills and advanced knowledge or experience in varied information technology fields, including cybersecurity and information security, IT governance and controls, identity and access management, operating systems, databases, application development, systems development life cycle, Agile and modern architecture, cloud technologies, data governance, privacy, digital transformation, artificial intelligence, and emerging technologies.; Demonstrated ability to independently plan and execute risk-based audit, compliance, risk, or technology-related assignments.; Working knowledge of IT governance, cybersecurity, technology controls, and risk management concepts.; Bachelor's degree in Computer Science, Management Information Systems, Information Technology, Cybersecurity, Engineering, Accounting, Business Administration, Economics, Data Science, Artificial Intelligence, or a related discipline.; Three (3) or more years of relevant professional experience in IT auditing, cybersecurity, technology risk management, information security, public accounting, consulting, major systems implementation, or a related field.

Nice to have

Five (5) or more years of relevant professional experience in IT auditing, cybersecurity, technology risk management, information security, public accounting, consulting, major systems implementation, or a related field.; Advanced degree, such as an MBA or a master's degree in Information Systems, Cybersecurity, Data Analytics, Data Science, Artificial Intelligence, or a related field.; Holds or is working toward one or more relevant professional certifications, such as CISA, CISSP, CISM, CRISC, CIPP, CIA, PMP, PE, or a relevant cloud, artificial intelligence, data science, or analytics certification.; Experience within a large public accounting firm, consulting firm, Fortune 500 company, utility, energy company, or highly regulated organization.; Experience leading complex audit, risk, compliance, technology, or major systems implementation assignments.; Experience auditing or assessing cloud environments, cybersecurity programs, data governance, digital transformation initiatives, artificial intelligence, or emerging technologies.; Written and oral communication skills with the ability to tailor messages for varying audiences and levels of management.; Resourcefulness and sound judgment when managing through ambiguity, including complex audit projects.; Ability to work independently, balance multiple projects, and deliver results within established milestones.; Ability to identify and assess risks and impacts and develop and manage a risk-informed audit scope and approach.; Acknowledgement of customer needs and expectations, including the ability to adjust tasks appropriately to add value to the business.; Project leadership experience, including the ability to guide and coach assigned audit staff.; Data analytics, visualization, automation, or AI-enabled audit experience.