Important Application Submission InformationIn order to ensure your application is successfully received before the job posting expires, please submit your application by 11:59 PM on Friday, April 24, 2026<h2>More than a career - a chance to make a difference in people's lives.</h2>Build an exciting, rewarding career with us – help us make a difference for millions of people every day. Consider joining the Duke Energy team, where you'll find a friendly work environment, opportunities for growth and development, recognition for your work, and competitive pay and benefits.Duke Energy’s Corporate Audit Services Department delivers world-class internal audit services that enable Duke Energy to achieve superior performance. You will work in high-performing teams that add value, drive effective risk management, and facilitate constructive change while also focusing on employee and professional development.The IT Audit Consultant is responsible for conducting complex cybersecurity and IT audit assignments under the supervision of an in-charge auditor. Working collaboratively within a team, the consultant participates in a variety of audit activities, including risk assessments, development of audit test plans, data collection and analysis to reach informed conclusions, preparation of audit deliverables to substantiate findings, and communication of identified issues. The role involves frequent interaction with individuals at multiple levels of management, both within and outside the department, as well as occasional engagement with third-party vendors. Audits typically last for 6 to 8 weeks and involve varying subjects, risks, audit clients, and team members. The IT Audit Consultant leverages a comprehensive set of technical IT skills to evaluate risk and identify potential cyber and IT-related issues across disciplines such as applications, databases, infrastructure, and cybersecurity.  ResponsibilitiesOperate effectively within a collaborative team environment, contributing to the successful execution of cyber and IT-related assurance and advisory engagements by ensuring the delivery of high-quality audit documentation and deliverables. Responsibilities include testing, documenting, and evaluating cyber and IT general computing controls, as well as analyzing relevant risks associated with data, applications, infrastructure, and cloud technologies across both IT and Operational Technology (OT) environments. Successful candidate will be responsible for:<ul><li>Gathering and evaluating information using logical thinking to reach appropriate conclusions</li><li>Assessing the design and operating effectiveness of processes with an appropriate level of professional skepticism</li><li>Monitoring and tracking the progress of post-audit action plans, and conducting follow-up procedures to confirm implementation and risk mitigation</li><li>Leveraging data analytics to identify areas of significant risk and enhance customer value</li><li>Develop and sustain strong relationships with audit clients at all management levels</li></ul>Collaborate with other internal audit professionals on improvement initiatives aimed at improving productivity, efficiency, and quality within Corporate Audit Services.Basic/Required QualificationsBachelor’s or Master’s degree in Computer Science, Business Administration, Finance or other related degrees (e.g. Accounting, Engineering, Economics, Computer Science).  Three or more years work related experienceJob specific key skills/experience/certificationsCybersecurity; Internal Auditing; IT Audit.Holds or is working towards a Certified Information Systems Auditor, Certified Information Systems Security Professional, Certified Information Privacy Professional, Project Management Professional, Professional Engineer, or Certified Fraud Examiner certificationDesired Qualifications<ul><li>Prior IT audit experience in a professional services firm or fortune 500 company</li><li>Advanced knowledge in relevant cybersecurity and information technology fields such as general cloud cybersecurity, Active Directory, Windows/UNIX, databases (Oracle, SQL, DB2), SAP, application development/system development life cycle, network security, NERC CIP, PeopleSoft or Maximo  </li><li>Advanced degree, such as an MBA or Masters in Information Security</li><li>Demonstrated ability to communicate clearly, concisely, and accurately using oral and written communications</li><li>Ability to reason logically, analyze data presented, evaluate the impact of information collected, and draw appropriate conclusions</li><li>Demonstrated ability to develop and maintain good working relationships with internal and external customers </li><li>Ability to assess and determine risk impacts</li><li>An understanding of system development life cycle</li><li>Demonstrated functional audit knowledge and ability to apply auditing protocols</li><li>Ability to work independently and balance multiple projects</li><li>Ability to identify and assess risks and impacts</li><li>Proficiency in data analytics tools</li><li>Knowledge of Artificial Intelligence concepts, along with an understanding of its impacts and governance</li></ul>#LI-PG1#LI-Hybrid<h2>Mobility Classification - Hybrid</h2>Travel Requirements5-15%<h3>Relocation Assistance Provided (as applicable)</h3>No<h3>Represented/Union Position</h3>No<h3>Visa Sponsored Position</h3>No<h3>Please note that in order to be considered for this position, you must possess all of the basic/required qualifications.</h3><a href="https://www.duke-energy.com/legal/privacy">Privacy</a><a href="https://www.duke-energy.com/legal/ccpa-opt-out-request-form">Do Not Sell My Personal Information (CA)</a><a href="https://www.duke-energy.com/legal/terms-of-use">Terms of Use</a><a href="https://www.duke-energy.com/customer-service/accessibility">Accessibility</a>

<div class="org-about-module__description">
<div id="ember59" class="ember-view organization-about-module__content-consistant-cards-description">Duke Energy, a Fortune 150 company headquartered in Charlotte, N.C., is one of America&rsquo;s largest energy holding companies. The company&rsquo;s electric utilities serve 8.4 million customers in North Carolina, South Carolina, Florida, Indiana, Ohio and Kentucky, and collectively own 54,800 megawatts of energy capacity. Its natural gas utilities serve 1.7 million customers in North Carolina, South Carolina, Tennessee, Ohio and Kentucky. Duke Energy is executing an ambitious clean energy transition, keeping reliability, affordability and accessibility at the forefront as the company works toward net-zero methane emissions from its natural gas business by 2030 and net-zero carbon emissions from electricity generation by 2050. The company is investing in major electric grid upgrades and cleaner generation, including expanded energy storage, renewables, natural gas and nuclear. Our team is available Monday to Friday from 8 a.m. to 5 p.m. EST. If you suspect an emergency, please call 911.</div>
</div>
<div class="org-about-module__content-improvement">
<div class="org-about-module__content-box">&nbsp;</div>
</div>

IT Audit Consultant

Important Application Submission InformationIn order to ensure your application is successfully received before the job posting expires, please submit your application by 11:59 PM on Friday, April 24, 2026<h2>More than a career - a chance to make a difference in people's lives.</h2>Build an exciting, rewarding career with us – help us make a difference for millions of people every day. Consider joining the Duke Energy team, where you'll find a friendly work environment, opportunities for growth and development, recognition for your work, and competitive pay and benefits.Duke Energy’s Corporate Audit Services Department delivers world-class internal audit services that enable Duke Energy to achieve superior performance. You will work in high-performing teams that add value, drive effective risk management, and facilitate constructive change while also focusing on employee and professional development.The IT Audit Consultant is responsible for conducting complex cybersecurity and IT audit assignments under the supervision of an in-charge auditor. Working collaboratively within a team, the consultant participates in a variety of audit activities, including risk assessments, development of audit test plans, data collection and analysis to reach informed conclusions, preparation of audit deliverables to substantiate findings, and communication of identified issues. The role involves frequent interaction with individuals at multiple levels of management, both within and outside the department, as well as occasional engagement with third-party vendors. Audits typically last for 6 to 8 weeks and involve varying subjects, risks, audit clients, and team members. The IT Audit Consultant leverages a comprehensive set of technical IT skills to evaluate risk and identify potential cyber and IT-related issues across disciplines such as applications, databases, infrastructure, and cybersecurity.  ResponsibilitiesOperate effectively within a collaborative team environment, contributing to the successful execution of cyber and IT-related assurance and advisory engagements by ensuring the delivery of high-quality audit documentation and deliverables. Responsibilities include testing, documenting, and evaluating cyber and IT general computing controls, as well as analyzing relevant risks associated with data, applications, infrastructure, and cloud technologies across both IT and Operational Technology (OT) environments. Successful candidate will be responsible for:<ul><li>Gathering and evaluating information using logical thinking to reach appropriate conclusions</li><li>Assessing the design and operating effectiveness of processes with an appropriate level of professional skepticism</li><li>Monitoring and tracking the progress of post-audit action plans, and conducting follow-up procedures to confirm implementation and risk mitigation</li><li>Leveraging data analytics to identify areas of significant risk and enhance customer value</li><li>Develop and sustain strong relationships with audit clients at all management levels</li></ul>Collaborate with other internal audit professionals on improvement initiatives aimed at improving productivity, efficiency, and quality within Corporate Audit Services.Basic/Required QualificationsBachelor’s or Master’s degree in Computer Science, Business Administration, Finance or other related degrees (e.g. Accounting, Engineering, Economics, Computer Science).  Three or more years work related experienceJob specific key skills/experience/certificationsCybersecurity; Internal Auditing; IT Audit.Holds or is working towards a Certified Information Systems Auditor, Certified Information Systems Security Professional, Certified Information Privacy Professional, Project Management Professional, Professional Engineer, or Certified Fraud Examiner certificationDesired Qualifications<ul><li>Prior IT audit experience in a professional services firm or fortune 500 company</li><li>Advanced knowledge in relevant cybersecurity and information technology fields such as general cloud cybersecurity, Active Directory, Windows/UNIX, databases (Oracle, SQL, DB2), SAP, application development/system development life cycle, network security, NERC CIP, PeopleSoft or Maximo  </li><li>Advanced degree, such as an MBA or Masters in Information Security</li><li>Demonstrated ability to communicate clearly, concisely, and accurately using oral and written communications</li><li>Ability to reason logically, analyze data presented, evaluate the impact of information collected, and draw appropriate conclusions</li><li>Demonstrated ability to develop and maintain good working relationships with internal and external customers </li><li>Ability to assess and determine risk impacts</li><li>An understanding of system development life cycle</li><li>Demonstrated functional audit knowledge and ability to apply auditing protocols</li><li>Ability to work independently and balance multiple projects</li><li>Ability to identify and assess risks and impacts</li><li>Proficiency in data analytics tools</li><li>Knowledge of Artificial Intelligence concepts, along with an understanding of its impacts and governance</li></ul>#LI-PG1#LI-Hybrid<h2>Mobility Classification - Hybrid</h2>Travel Requirements5-15%<h3>Relocation Assistance Provided (as applicable)</h3>No<h3>Represented/Union Position</h3>No<h3>Visa Sponsored Position</h3>No<h3>Please note that in order to be considered for this position, you must possess all of the basic/required qualifications.</h3><a href="https://www.duke-energy.com/legal/privacy">Privacy</a><a href="https://www.duke-energy.com/legal/ccpa-opt-out-request-form">Do Not Sell My Personal Information (CA)</a><a href="https://www.duke-energy.com/legal/terms-of-use">Terms of Use</a><a href="https://www.duke-energy.com/customer-service/accessibility">Accessibility</a>

IT Audit Consultant

About the Job

About the Company

Duke Energy

Similar Jobs

IT Officer

IT Officer

Information Systems Security Officer

Information Systems Security Officer

Consultant Informatique des Services sur Site / IT On-Site Services Consultant

Consultant Informatique des Services sur Site / IT On-Site Services Consultant

Factory IT / OT Specialist

Factory IT / OT Specialist

Senior SOX Compliance Analyst - IT

Senior SOX Compliance Analyst - IT

Senior Manager of IT Audit

Senior Manager of IT Audit

IT Helpdesk Specialist

IT Helpdesk Specialist

IT Officer

IT Officer

IT Auditor

IT Auditor

IT SOX ERP Compliance Specialist

IT SOX ERP Compliance Specialist