IT Audit Manager

Live your ambition. Lead with impact

You will play a key role in enhancing Costa’s technology risk and assurance framework while contributing to Carnival Corporation’s broader audit and risk management vision. Through collaboration with global stakeholders, you will help ensure secure, compliant, and effective technology operations across both shoreside and shipboard environments, supporting business innovation, digital transformation, and operational excellence.

IT Audit Strategy, Risk Assurance & Governance. You will perform risk-based IT audit plans across Costa’s technology landscape, assessing the effectiveness of IT controls, governance frameworks, security measures, and compliance processes. You will identify risks and opportunities for improvement, providing actionable recommendations that strengthen resilience and operational effectiveness.

Technology Risk Assessment & Business Partnership. You will collaborate with IT and business stakeholders to evaluate technology risks across systems, applications, infrastructure, and digital initiatives. Acting as a trusted advisor, you will support management in understanding risk exposure, addressing audit findings, and implementing sustainable improvements that align with business priorities.

Cross-Functional Collaboration & Continuous Improvement. You will work closely with Technology, Finance, Legal, Compliance, and other business functions to drive remediation activities, monitor progress, and promote a culture of accountability and risk awareness. Through data-driven insights and strong stakeholder engagement, you will contribute to the continuous evolution of Costa’s audit and risk management practices.

What Makes You Unique

• 6-10 years of experience in IT Audit, IT Risk Management, IT Compliance, or related assurance functions, ideally within multinational, consulting, or highly regulated environments.

• Strong knowledge of IT audit methodologies, risk management frameworks, internal controls, compliance standards, and information security principles.

• Proven experience assessing technology risks across applications, infrastructure, cybersecurity, cloud environments, and digital transformation initiatives.

• Professional certifications such as CISA, CISSP, CRISC, or equivalent, combined with a degree in Information Technology, Computer Science, Accounting, or a related field.

• Strong stakeholder management and influencing skills, with the ability to build trusted relationships across technology and business functions and translate complex risks into actionable recommendations.

• Comfortable operating in a global environment, collaborating with international teams and working closely with the Carnival Corporation Internal Audit organization on cross-company audit initiatives and best practices.

• Availability to travel frequently, both domestically and internationally, including visits to operational sites and ships, as part of audit and risk assessment activities.