Internal Audit Manager - IT & Cybersecuity
Posted Jul 13, 2026 · We last checked this listing on Oct 6, 2026
Likely interview questions for this role
Written from this job description, not a generic list. Each one notes what the interviewer is really checking.
About your past
Tell me about a proposal or budget you helped put together for an audit engagement.
What they are checking: The posting includes proposal and budget work, so they want proof of business-side contribution.
Tell me about a time you coached a staff auditor whose workpapers needed a lot of rework.
What they are checking: Whether they develop staff thoughtfully while protecting audit quality.
What would you do
You find a significant cybersecurity weakness and the CIO pushes back on your rating. What do you do?
What they are checking: Whether they hold their ground with evidence while keeping a working relationship with management.
Your audit team is behind schedule and the client's audit committee meeting is next week. What do you do?
What they are checking: How they manage scope, quality and deadlines under pressure as a manager.
How would you help a bank build an internal audit approach that covers strategy, people, process and technology together?
What they are checking: The posting stresses an integrated approach, and they want to see how the candidate connects these pieces.
About the work
Walk me through how you build an IT internal audit risk assessment for a bank.
What they are checking: Leading risk assessment is a named duty, and they want a clear, repeatable method grounded in banking risk.
What IT and cybersecurity regulations and guidance do you rely on most when auditing a bank?
What they are checking: Whether they know frameworks like FFIEC, NIST and GLBA well enough to ground audit work in them.
How would you test controls over privileged access in a core banking system?
What they are checking: Hands-on audit skill in a high-risk area where many banks have real gaps.
How do you audit third-party and vendor risk for a bank that relies heavily on cloud providers?
What they are checking: Whether they understand how outsourcing changes the control environment and what regulators expect.
How do you write an audit finding so the board and management both understand the risk?
What they are checking: Whether they can communicate findings clearly enough that leaders act on them.
Practice this interview out loud.
Offer builds a real interview for this exact role at Huron Consulting from your resume and this job description, asks the questions one at a time, and tells you what landed. The first one is free.
Practice this out loudThe full job description
As published by Huron Consulting.