Director, Cyber Security & IT Audit - Program Office

At MoneyGram, we're combining the strength of a trusted global brand with the agility of a tech-forward, growth driven culture. With 85+ years of experience and a presence in more than 200 countries and territories, we've built a foundation of stability and trust to help millions of people around the world send funds quickly, securely, and affordably.

We're looking for bold thinkers, builders, technologists, and sellers who want real ownership of their work, thrive in collaborative environments, and are energized by solving complex challenges. Here, you'll have the opportunity to make a measurable impact - fast.

If you're eager to shape the future of cross-border payments and financial services, join us as we transform how the world moves money.

Director, Cybersecurity & IT Audit

At MoneyGram, we connect the world by making cross-border money transfers seamless, affordable, and secure for everyone.

We are seeking a Director of Cybersecurity & IT Audit to join our Internal Audit team. This role will play a key part in shaping the future of IT risk management and cybersecurity assurance across the enterprise. The Director will be expected to bring forward-looking insights, challenge the status quo, and help drive innovation in audit practices and IT governance.

The Director of Cybersecurity & IT Audit will have specific responsibility for defining, assessing, and executing the Cybersecurity & IT Audit plan within the IA function in accordance with professional best practices, and will assist the Vice President, IA and the leadership team in driving function-wide transformation programs and the strategic direction for the team.

What you will get to do

• Develop and execute Cybersecurity and IT audit strategy in alignment with business objectives, based on thorough understanding of our business and risk exposures
• Lead cybersecurity and IT risk assessments, define risk-based audit programs, and plan, execute, and report on audits and advisory reviews across cybersecurity, IT, cloud, data protection and privacy, identity and access management, technology resilience, third-party technology risk, and AI and other emerging technologies
• Lead the IT SOX program, including ITGC risk assessment and scoping, control design, oversight of co-sourced testing, and reliance coordination with external auditors
• Serve as a strategic partner and go-to advisor for Cyber & IT leaders on risk and control matters, aligning on priorities and the scoping, planning, and execution of work
• Provide independent risk and control perspectives on IT governance, cybersecurity posture, and major technology initiatives, including system implementations and upgrades, cloud migrations, digital transformation, AI, and other emerging technologies
• Translate complex cybersecurity and technology risks into clear, business-focused insights for senior management and the Audit Committee
• Manage the Cybersecurity & IT audit budget and resources, including co-source and specialist support as needed, and help build and develop audit talent as the team grows
• Drive innovation and continuous improvement in Internal Audit, including risk-based methodology, data analytics, automation, and AI-enabled audit techniques

Examples of desirable skills, knowledge, and experience

• 10–15 years of experience in Cybersecurity and IT Audit, including risk assessment, control evaluation, hands-on audit execution, and strategic advisory across IT environments
• Strong knowledge of cybersecurity and technology frameworks (NIST CSF, ISO 27001, COBIT) and EU and UK requirements such as DORA, NIS2, GDPR, and the EU AI Act
• Strong IT SOX experience, including ITGC scoping, oversight of third-party testing, and external auditor reliance
• Strong understanding of cybersecurity and technology risks across areas such as ITGCs, cloud security, identity and access management, data protection and privacy, encryption, vulnerability management, network security, incident response, technology resilience, third-party risk, and AI and emerging technologies
• CISSP, CISA, CIA, CISM, or CRISC preferred
• Strong leadership and people skills, including experience in developing talent, driving continuous improvement, and building trusted relationships across all levels of the organization

The salary/pay rate listed below is a good faith determination that may be offered to a successful applicant for this position at the time of this job advertisement based on the company hiring process and budget for this role and may be modified in the future. Actual compensation may vary from posting based on geographic location, work experience, and/or skill level.

Here Are Some Reasons You Will Love Working At MoneyGram!

• Remote first flexibility
• Generous PTO
• 13 Paid Holidays
• Medical / Dental / Vision Insurance
• Life, Disability, and other benefits
• 401k with competitive Employer Match
• Community Service Days
• Generous Parental Leave

MoneyGram does not sponsor US work authorizations for this job position including H-1Bs, O-1, and TN. MoneyGram also does not hire F-1s working on EAD for this position.

About MoneyGram

MoneyGram is a global payments network built to move money across borders with speed, simplicity and trust. Its omnichannel platform empowers consumers, developers and agents to transfer cash, fiat and stablecoin however it works best for them.

The company serves over 60 million customers a year across 200+ countries and territories, nearly half a million retail locations and a rapidly expanding digital ecosystem reaching billions of devices. As one of the most recognized and trusted names in global payments, MoneyGram continues to reinvent how money moves - helping people around the world support their loved ones and build better futures.

MoneyGram is an Equal Opportunity Employer. We consider all qualified applicants for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, disability, genetic information, veteran status, or any other status protected by applicable law.