Senior Auditor, Internal Audit – Cyber & Technology
Carlyle Group
- Location
- Washington, DC
- Work model
- On-Site
- Level
- Senior
- Posted
- 22d ago
Skills
About this role
Position
Summary Carlyle's Global Internal Audit & Advisory function delivers independent assurance and practical insights that strengthen risk management, internal controls, and business operations across one of the world's leading alternative asset managers. The team partners directly with the business and maintains rigorous independence while driving real impact. The Senior Auditor, Internal Audit - Cyber and Technology, is a key member of the team and executes the audits in accordance with the annual audit plan, with approximately 70% of work focused on technology and cyber audits and 30% on process and compliance. As a Senior Auditor, you'll be hands-on across all phases of the audit lifecycle, planning, walkthroughs, fieldwork, testing, and reporting, with a primary focus on technology and cyber risk. You'll interact with a broad range of stakeholders within Cybersecurity and Technology, as well as front, middle, and back office, gaining broad exposure to complex processes, systems, and platforms. This is not a checkbox audit role: you'll bring genuine curiosity, exercise professional judgment, and actively leverage AI tools to modernize how audit work gets done. You'll also support the annual risk assessment process and ongoing audit reporting, giving you visibility into how a world-class internal audit function operates from the ground up. In-Office Requirement: 4 days a week Primary Responsibilities Audit Execution Lead and execute all phases of audit engagements, planning, walkthroughs, fieldwork, testing, and reporting, using established methodologies and your own professional judgment. Conduct walkthroughs of technology-enabled business processes to map system flows, identify risks, and evaluate the design and operating effectiveness of controls. Obtain, analyze, and validate audit evidence; prepare clear process narratives, risk and control matrices, testing workpapers, and well-reasoned audit reports. Identify control deficiencies and execution gaps; document findings with precision, including root causes, impacts, and practical remediation guidance. Support issue tracking, remediation validation, and follow-up testing through to closure. AI-Enabled Audit Work Apply AI-enabled tools to analyze full populations, surface trends and anomalies, accelerate documentation drafting, and sharpen audit conclusions. Design, refine, and systematize effective prompts that improve the quality, consistency, and efficiency of AI-assisted audit work across the team. Exercise sound professional judgment with AI and analytics outputs-validating results, understanding model limitations, and ensuring every conclusion is grounded in appropriate evidence. Identify and champion opportunities to enhance audit efficiency through data analytics, automation, and AI integration within existing processes. Stakeholder Engagement and Other Activities Contribute to the annual risk assessment and audit planning process by bringing a point of view on emerging technology and cyber risks that shapes the forward-looking audit agenda. Support the preparation of Audit Committee and senior management reporting, translating audit results and trends into clear, executive-ready narratives. Serve as a credible point of contact for stakeholders across Cybersecurity, Technology, and front, middle, and back office, communicating findings, observations, and recommendations with clarity and confidence. Own assigned workstreams end-to-end: drive timelines, anticipate obstacles, and bring leadership solutions not just problems. Actively contribute to the continuous improvement of audit processes, methodology, and reporting by bringing ideas that make the function sharper over time.
Requirements
Education & Certificates Bachelor's degree, required Concentration in Accounting, Finance, Business Administration, Information Systems, or a related field, preferred Masters degree and/or relevant certifications or progress toward certification (e.g., CISA, CPA, CIA),