6 examples · Updated October 2026
Audit and Compliance Manager Resume Examples and Templates
A strong audit and compliance manager resume proves you reduce risk in ways leaders can measure: controls tested, findings remediated, exams supported and losses prevented. Lead with your scope (frameworks, regulators, business units), your CPA, CIA, CISA or CAMS, and before-and-after results.
Audit & Compliance Manager resume at a glance
- Best format
- Reverse-chronological, one column, certifications near the top
- Length
- 1 page; 2 pages after 10+ years
- Top skills
- SOX 404 controls testing, Risk-based audit planning, Regulatory compliance management, Audit data analytics
- Key credentials
- CPA (state board of accountancy), CIA (The IIA), CISA (ISACA) for IT audit
- Median pay
- $141,900 a year ($68.22 an hour)Compliance Managers, BLS 2025 wage data via O*NET
- Job outlook
- Faster than average (5% to 6%)100,900 openings a year, 2025-2035 projection
6 audit & compliance manager resume examples for 2026
Below are 6 compliance resume samples, from staff internal auditor to audit director, including compliance manager, IT audit manager and risk and compliance manager resumes. You also get copy-ready summaries (one for an internal audit manager), skills, bullets, ATS keywords and a free template. Each one is shown at true A4 size and comes with a free single-column Word version. Open any example to read it in full.
Swipe to see all 6 examples →
Sofia Delgado
Staff Internal Auditor, CPA
Cincinnati, OH · sofia.delgado@email.com · (555) 011-2847 · linkedin.com/in/sofiadelgado
About
CPA and staff internal auditor with 4 years of audit experience: 2 in external audit at a regional CPA firm and 2 on a 9-person internal audit team at a $1.8B industrial manufacturer. Comfortable with SAP S/4HANA data, COSO 2013 and workpapers that external auditors rely on. CIA candidate with Part 1 passed, ready for senior internal auditor work.
Professional Experience
Internal Auditor, Ravensbrook Industrial Group, Cincinnati, OH 2024-Present
- Test 45 SOX key controls a year across order-to-cash, procure-to-pay and inventory at 6 US plants, delivering all testing before external auditor deadlines.
- Built an IDEA duplicate-payment test over 310,000 vendor invoices, recovering $186K and launching a weekly accounts payable exception report.
- Led 4 plant inventory audits, tracing cycle-count variances to a scrap-reporting gap and helping cut inventory write-offs 27% the next year.
Audit Associate, Assurance Services, Ashcombe Vale LLP, Cincinnati, OH 2022-2024
- Audited revenue, receivables and inventory for 9 private and 2 SEC-registered clients in manufacturing and distribution.
- Performed ICFR walkthroughs and tested IT-dependent manual controls on 2 integrated audits under PCAOB standards.
- Trained 5 new associates on inventory observations, sampling and workpaper documentation across 2 busy seasons.
Internal Audit Intern, Corvane Retail Group, Dayton, OH Summer 2021
- Tested travel and expense controls on 150 corporate card transactions, flagging 11 policy exceptions for follow-up.
- Reconciled HR terminations to payroll for 2,100 employees, finding 3 post-termination payments that led to a new cutoff check.
Education
Master of Accountancy (MAcc) and B.S. in Accounting, University of Cincinnati, 2022
Certifications
Certified Public Accountant (CPA), Ohio, 2024 · Certified Internal Auditor (CIA) candidate, The IIA: Part 1 passed, 2026
Core Skills
SOX 404 control testing · Walkthroughs and process narratives · Risk and control matrices (RCMs) · Order-to-cash and procure-to-pay audits · Full-population data analytics · Sampling and evidence evaluation · Audit finding and report writing · COSO 2013 framework · Inventory and fixed asset audits · Fraud red-flag testing
Why this example works
- Puts the CPA and CIA progress beside the title, the two signals audit managers use to judge a staff auditor’s trajectory.
- Every bullet names the cycle tested and a result (recovery, write-off cut, findings agreed), not just ‘performed testing’.
- Frames public accounting years as ICFR and SOX experience, the bridge most industry internal audit teams hire for.
Gregory Palmer
Audit & Compliance Manager, CIA, CISA, CPA
Chicago, IL · gregory.palmer@email.com · (555) 013-4567 · linkedin.com/in/gregorypalmer
Profile
Audit and compliance manager with 13 years in internal audit, SOX and regulatory compliance across a publicly traded asset manager, a property and casualty insurer and a community bank. Leads a team covering finance, IT and operations, and reports quarterly to the CFO and audit committee. CIA, CISA and CPA who pairs COSO-based control design with full-population analytics, building remediation plans that business owners actually adopt.
Professional Experience
Audit & Compliance Manager, Kestrelmoor Financial Group, Chicago, IL 2021-Present
- Direct a SOX program covering 220+ key controls across 14 processes, with 4 consecutive years of no material weaknesses or significant deficiencies.
- Drove remediation of 95% of identified control deficiencies within 60 days by tracking owners, due dates and retests in AuditBoard, cutting repeat findings 80%.
- Built a continuous-monitoring dashboard in Power BI that flagged $1.2M in policy exceptions, such as unapproved fee waivers, before quarter close.
- Raised external auditor reliance on internal testing from 30% to 65% of key controls, reducing the annual audit fee by $210K.
- Partnered with the chief compliance officer on 2 SEC examinations and a FINRA cycle exam, delivering 400+ document requests on schedule.
- Manage and coach 6 auditors, 3 of whom have earned the CIA or CISA and 2 of whom were promoted to senior.
Senior Internal Auditor, Quillfield Mutual Insurance, Chicago, IL 2016-2021
- Executed 25+ risk-based audits a year across claims, underwriting, finance and IT for a property and casualty insurer licensed in 22 states.
- Uncovered a vendor kickback scheme in facilities procurement through invoice and vendor-master analytics, preventing $640K in projected losses.
- Reduced audit cycle time 30% by replacing sample testing with ACL scripts over full populations of claim payments and premium refunds.
- Tested 140 controls a year for the insurer’s NAIC Model Audit Rule internal control report, with no reportable deficiencies.
- Recommended monthly reinsurance recoverable reconciliations that cleared a $3.1M unreconciled balance within 2 quarters.
Internal Auditor, Menomonee Bluff Trust Bank, Milwaukee, WI 2013-2016
- Tested internal controls over financial reporting across 12 branches and the loan operations center for a $2B bank, with zero missed deadlines.
- Documented 80+ process narratives and risk and control matrices that became the bank’s standard audit library.
- Drafted 40+ audit reports, with 90% of recommendations adopted by management within the agreed timeline.
- Added BSA/AML, OFAC and Regulation E tests to the branch audit program, uncovering late currency transaction report filings at 3 branches.
Internal Audit Intern, Menomonee Bluff Trust Bank, Milwaukee, WI Summer 2012
- Tested teller cash-drawer and vault dual-control procedures at 6 branches, earning a full-time offer after graduation.
- Built an Excel tracker for open audit issues that the department used until its GRC platform launched.
Education
B.S. in Accounting & Information Systems, University of Illinois, 2013
Certifications
Certified Internal Auditor (CIA), The Institute of Internal Auditors · Certified Information Systems Auditor (CISA), ISACA · Certified Public Accountant (CPA), Illinois
Core Skills
SOX compliance and internal controls · Risk-based audit planning · COSO and COBIT frameworks · Fraud risk assessment · SEC and FINRA regulatory compliance · Audit committee reporting · ITGC and IT application controls · Control remediation and root cause · Continuous controls monitoring · Data analytics (ACL, SQL, Power BI) · SOC report reviews · Team leadership and coaching
Technical
AuditBoard · Diligent ACL Analytics · SQL · Power BI · Workiva · Oracle Fusion · Microsoft Excel and Visio
Key Projects
- Led the 2022 AuditBoard rollout, moving 1,100 workpapers and control tests off spreadsheets in 10 weeks
- Co-led the 2024 SOX scoping refresh with the controller, retiring 35 low-risk controls and adding 12 for a new custody platform
- Designed the firm’s first fraud risk assessment with Legal and Finance, mapping 38 fraud schemes to controls and closing 6 unmitigated gaps
Speaking, Affiliations and Board Service
- Speaker, Continuous Monitoring on a Mid-Size Budget, regional IIA chapter seminar, 2024
- Volunteer treasurer, a Chicago youth literacy nonprofit, 2022-Present
- Member, The IIA, ISACA and the Illinois CPA Society
Why this example works
- Quantifies SOX scope and results in the first bullet, answering the screening question for any resume for a controls and compliance manager.
- Combines audit outcomes (deficiencies, recoveries, auditor reliance) with compliance work (SEC and FINRA exams), matching hybrid audit and compliance roles.
- Shows a 13-year path from bank internal auditor to manager, with CIA, CISA and CPA proving range across finance and IT.
Why this example works
- Names bank size, regulator and program areas in the summary, so a chief compliance officer sees the exact scope in one line.
- Mixes BSA/AML and consumer compliance results, the combination most regional and community bank compliance managers are hired for.
- Shares outcomes without revealing confidential exam findings, and shows a clear path from AML investigator to manager.
Applying through an online portal? Use the Word download: it is the same resume in a single-column, ATS-safe layout. Keep this two-column design for emailing and networking.
Anjali Mehta
IT Audit Manager, CISA, CRISC
Austin, TX · anjali.mehta@email.com · (555) 016-3392 · linkedin.com/in/anjalimehta
Summary
IT audit manager with 10 years in IT audit and risk advisory, after 3 years as a healthcare systems analyst. Leads SOX ITGC testing, SOC report reviews and cybersecurity audits mapped to NIST CSF 2.0 across AWS, Okta, Workday and NetSuite at a public SaaS company with 2,800 employees. CISA and CRISC certified, and comfortable briefing audit committees and engineering leaders in plain language.
Core Competencies
SOX ITGC testing (access, change, operations) · IT application controls and IPE · SOC 1 and SOC 2 report reviews · Cloud audit (AWS) · NIST CSF 2.0 and ISO 27001 mapping · Identity and access reviews · Cybersecurity and incident response audits · Third-party risk assessment · Audit automation (Python, SQL) · COBIT 2019 · AI governance reviews · Audit committee reporting
Professional Experience
IT Audit Manager, Cobalt Wren Software, Inc., Austin, TX 2023-Present
- Lead a 4-person team testing 85 ITGCs and 40 automated controls across 9 SOX-relevant systems for a Nasdaq-listed SaaS company.
- Automated user-access and change evidence pulls from Okta, AWS and Jira in Python, cutting quarterly ITGC testing hours 45%.
- Drove ITGC deficiencies from 4 in FY2022 to none in FY2023-FY2025 by recommending privileged-access and change-approval redesigns that IT adopted.
- Ran a NIST CSF 2.0 maturity assessment for the CISO and audit committee, prioritizing 12 gaps, 9 of which Security closed within 2 quarters.
- Review 60+ vendor SOC 1 and SOC 2 reports a year, mapping complementary user entity controls and escalating 5 vendors with qualified opinions.
- Audited the 2025 AI coding assistant rollout, recommending data-loss, access and code-review guardrails that Engineering put in place before production use.
Senior IT Auditor, Cobalt Wren Software, Inc., Austin, TX 2020-2023
- Tested ITGCs for NetSuite, Workday and the billing platform, plus IPE for 30 key reports used in revenue and payroll controls.
- Helped prepare the company’s first SOX 404(b) integrated audit, documenting 14 ITGC narratives and walkthroughs in 5 months.
- Advised Security and Engineering on SOC 2 Type II readiness for the core platform, pre-testing controls ahead of a first report with no exceptions.
- Wrote SQL tests over 2.3 million billing records, validating automated pricing controls and finding a $95K credit memo error.
- Tested quarterly access reviews covering 1,400 accounts, flagging 210 inappropriate or orphaned accounts that IT removed in the first year.
Consultant to Senior Consultant, IT Risk Advisory, Pinecastle Kemp LLP, Dallas, TX 2016-2020
- Tested ITGCs and application controls for 15 SOX clients in healthcare, energy and retail, leading 3-person engagement teams by year 3.
- Delivered 10 SOC 1 and SOC 2 examinations, drafting system descriptions and testing controls under AICPA attestation standards.
- Assessed HIPAA Security Rule safeguards for 4 healthcare provider clients, writing remediation roadmaps their compliance committees adopted.
- Earned the CISA in year 2 and taught the firm’s internal course on testing IT-dependent manual controls.
Systems Analyst, Tarrow Plains Medical Group, Plano, TX 2013-2016
- Administered Active Directory and EHR access for 900 staff across 12 clinics, clearing a backlog of 300 terminated-user accounts.
- Ran the clinics’ first quarterly backup restore tests, cutting scheduling-system recovery time from 2 days to 6 hours.
- Gathered evidence for 40 security controls during a HIPAA risk analysis led by outside assessors.
Education
M.S. in Information Technology and Management, The University of Texas at Dallas, 2016
B.S. in Management Information Systems, Texas Tech University, 2013
Certifications
Certified Information Systems Auditor (CISA), ISACA, 2018 · Certified in Risk and Information Systems Control (CRISC), ISACA, 2022 · AWS Certified Cloud Practitioner, Amazon Web Services, 2023
Technical
AuditBoard · ServiceNow IRM · Python (pandas) · SQL · AWS CloudTrail and Config · Okta · Splunk · Jira
Key Projects
- Built the IT audit universe of 60 auditable entities and a 3-year coverage plan approved by the audit committee
- Led the IT integration audit after a 300-person acquisition, bringing 5 new systems into SOX scope within 2 quarters
Speaking and Mentoring
- Speaker, Automating ITGC Evidence with Python, local ISACA chapter meeting, 2025
- Lead a volunteer CISA study group that has coached 14 candidates since 2022
- Mentor 3 financial auditors who moved into IT audit roles
Affiliations
- Member, ISACA and The Institute of Internal Auditors (IIA)
Why this example works
- Leads with CISA, CRISC and named platforms (AWS, Okta, NetSuite), so recruiters and ATS see technical fit before reading a bullet.
- Deficiency counts before and after, plus automation hours saved, show her recommendations improved controls while management owned every fix.
- Shows a credible path from systems analyst to advisory to in-house manager, with current topics like NIST CSF 2.0 and AI.
Why this example works
- Opens with licensing footprint and program ownership, the scope a fintech chief risk officer checks before anything else.
- Uses current, specific standards (PCI DSS v4.0.1, RCSA, KRIs) instead of a long list of acronyms with no role attached.
- Fraud and disputes roots explain how he reached risk and compliance, and each move adds scope: cases, then products, then programs.
Applying through an online portal? Use the Word download: it is the same resume in a single-column, ATS-safe layout. Keep this two-column design for emailing and networking.
Patricia Nwosu
Director of Audit and Compliance, CPA, CIA, CHC
Minneapolis, MN · patricia.nwosu@email.com · (555) 018-2264 · linkedin.com/in/patricianwosu
Executive Profile
Audit and compliance director with 17 years in healthcare internal audit, compliance and public accounting, now leading both functions for a 9-hospital health system with $5.2B in revenue. Reports functionally to the board audit and compliance committee, owns the risk-based audit plan and runs a compliance program built on the OIG’s seven elements. CPA, CIA and CHC with deep revenue cycle, Stark and Anti-Kickback expertise.
Core Competencies
Risk-based audit planning · IIA Global Internal Audit Standards · Compliance program management (OIG GCPG) · Board and committee reporting · Billing and coding compliance · Stark Law and Anti-Kickback Statute reviews · HIPAA privacy and security · Investigations and hotline management · Quality assurance and improvement program (QAIP) · Enterprise risk management (COSO ERM) · Budget and co-source management · Team development and succession
Professional Experience
Director of Audit and Compliance, Lindenmere Health System, Minneapolis, MN 2020-Present
- Lead a 14-person audit and compliance team with a $3.1M budget, delivering 40 audits and 25 compliance reviews a year.
- Aligned the internal audit charter, methodology and QAIP to the IIA’s Global Internal Audit Standards ahead of their January 2025 effective date.
- Rebuilt the compliance program around the OIG’s 2023 General Compliance Program Guidance, adding an annual compliance risk assessment and effectiveness review.
- Cut the outpatient E/M coding error rate from 14% to 5% in 2 years through targeted provider education and pre-bill reviews.
- Direct 60+ hotline, privacy and conflict-of-interest investigations a year with Legal and HR, closing 88% within 45 days.
- Earned a generally conforms rating, the highest available, in the 2024 external quality assessment of internal audit.
Internal Audit Manager, Lindenmere Health System, Minneapolis, MN 2015-2020
- Managed 6 auditors delivering 30 audits a year across revenue cycle, supply chain, payroll, research grants and IT.
- Led integration audits of 3 acquired hospitals, mapping 200+ policies to system standards and closing 41 legacy findings within 18 months.
- Identified $2.7M in missed implant charges through a supply-to-charge reconciliation in perioperative services.
- Launched monitoring of physician payments against fair market value and contract terms, flagging 23 arrangements for Stark and AKS review.
- Co-sourced cybersecurity audits with an outside firm, covering 12 critical systems within a fixed budget.
Senior Compliance Auditor, Ironleaf Medical Center, St. Paul, MN 2011-2015
- Audited 1,500+ inpatient and professional claims a year for medical necessity, coding accuracy and documentation, refunding $410K in identified overpayments.
- Designed a 340B program audit that corrected duplicate-discount risk across 6 contract pharmacies and fixed Medicaid carve-out billing flags.
- Reviewed EHR access logs monthly, leading 15 privacy investigations and 4 HIPAA breach risk assessments with the privacy officer.
- Trained 400 providers and coders on ICD-10 documentation ahead of the October 2015 transition through 22 specialty-specific sessions.
Associate, Audit and Assurance, Ostrander Bell LLP, Minneapolis, MN 2009-2011
- Audited financial statements for 8 hospital and nonprofit clients, including OMB A-133 single audits of federal awards.
- Tested contractual allowance estimates and Medicare cost report settlement reserves for 3 health system clients.
- Passed all 4 sections of the CPA exam in 11 months while working full busy seasons.
Education
Master of Business Administration (MBA), University of Minnesota Carlson School of Management, 2016
B.S. in Accounting, University of St. Thomas, 2009
Certifications
Certified Public Accountant (CPA), Minnesota · Certified Internal Auditor (CIA), The Institute of Internal Auditors · Certified in Healthcare Compliance (CHC), Compliance Certification Board
Technical
TeamMate+ · MetricStream · NAVEX EthicsPoint · Epic Resolute billing reports · Tableau · ACL Analytics
Board and Executive Reporting
- Hold quarterly executive sessions with the audit and compliance committee, without management present
- Member, executive risk committee, co-owning the system’s enterprise risk heat map with the CFO
Speaking and Affiliations
- Panelist, Auditing AI in the Revenue Cycle, regional healthcare compliance conference, 2025
- Guest lecturer on healthcare compliance programs, University of Minnesota health administration course, 2023-Present
- Member, Association of Healthcare Internal Auditors (AHIA) and Health Care Compliance Association (HCCA)
Leadership Development
- Developed 2 managers who are ready to step into the director role under the 2025 succession plan
- Sponsor of the system’s audit and compliance internship with 2 local universities
Why this example works
- Opens with function scope (hospitals, revenue, both functions) and the board reporting line, which is how audit committees size a director.
- Cites current standards, the IIA’s Global Internal Audit Standards and the OIG’s 2023 guidance, proving the program is up to date.
- Shows the path from public accounting to compliance auditor to manager to director, with healthcare depth at every step.
Audit & Compliance Manager resume summary examples
Copy the summary that matches your level, then swap in your own numbers, systems and specialties.
Internal auditor with 3 years of SOX and operational audit experience at a public consumer products company. Tests 40+ key controls a year across financial close, payroll and IT access, writes concise findings and automates sample selection in Alteryx. CPA candidate with 3 of 4 exam sections passed, seeking a senior internal auditor role.
Compliance manager with 9 years in medical device compliance, leading monitoring, training and investigations for a 4,000-employee manufacturer. Built a risk-based auditing plan for sales interactions with healthcare professionals, oversees Open Payments reporting and halved overdue investigations. CCEP certified, with strong partnerships across Legal, HR and Commercial teams.
Internal audit manager with 11 years in retail and distribution, leading a 5-person team that delivers 22 risk-based audits a year. Expanded data analytics to 70% of audits, built the annual fraud risk assessment and keeps management action plans 95% on time. CIA and CPA, reporting results quarterly to the audit committee.
IT audit manager and CISA with 9 years in banking and fintech, leading ITGC, cybersecurity and third-party audits across cloud and core banking platforms. Maps controls to NIST CSF 2.0 and FFIEC guidance, automated access-review testing in Python and cut ITGC exceptions by half in 2 years.
Risk and compliance manager with 8 years in insurance, owning the enterprise risk register, RCSA program and regulatory compliance across 30 states. Built 25 key risk indicators reported to the board risk committee, rebuilt third-party risk tiering for 400 vendors and coordinated input to the annual ORSA summary report.
Director of compliance with 15 years in banking compliance, leading a 20-person team across BSA/AML, consumer compliance and regulatory change for a $25B bank. Chairs the management compliance committee, reports quarterly to the board and built a compliance risk assessment that guides 150 testing reviews a year. CRCM and CAMS certified.
Want one written around your own experience? Try the free resume summary generator.
Best skills for a audit & compliance manager resume
List the skills the job posting names, in the same wording, and prove the important ones in your experience bullets.
Hard skills
- SOX 404 compliance and ICFR testing
- Internal controls design (COSO 2013)
- Risk-based audit planning
- Compliance risk assessment
- Compliance monitoring and testing
- Regulatory examination management
- Control remediation and root cause analysis
- Fraud risk assessment and investigations
- IT general controls (ITGC) and SOC report review
- Third-party risk management
- Policy and procedure development
- Data analytics and continuous monitoring
- Audit report writing
- Enterprise risk management (COSO ERM)
Soft skills
- Professional skepticism and judgment
- Influencing process owners without direct authority
- Concise reporting to executives and committees
- Independence and integrity under pressure
- Discretion with confidential information
- Coaching and reviewing staff work
- Negotiating realistic remediation plans
- Prioritizing by risk
Tools and software
- AuditBoard
- Wolters Kluwer TeamMate+
- Workiva
- Archer
- ServiceNow IRM
- MetricStream
- Diligent ACL Analytics
- CaseWare IDEA
- SQL and Python for audit analytics
- Microsoft Power BI and Excel
- NAVEX EthicsPoint
- Verafin or NICE Actimize (AML monitoring)
Certifications
- Certified Public Accountant (CPA), state board of accountancy
- Certified Internal Auditor (CIA), The Institute of Internal Auditors
- Certified Information Systems Auditor (CISA), ISACA
- Certified in Risk and Information Systems Control (CRISC), ISACA
- Certified Anti-Money Laundering Specialist (CAMS), ACAMS
- Certified Regulatory Compliance Manager (CRCM), American Bankers Association
- Certified Compliance and Ethics Professional (CCEP) and Certified in Healthcare Compliance (CHC), Compliance Certification Board
- Certified Fraud Examiner (CFE), Association of Certified Fraud Examiners
Audit & Compliance Manager resume bullet point examples
Strong bullets pair an action verb with a specific task and a measurable result. Adapt these to your own numbers.
SOX and internal controls
- Redesigned quarterly SOX sub-certifications for 120 control owners, adding evidence attestations that surfaced 14 unreported process changes before year-end.
- Designed entity-level and management review controls for a new lease accounting process, passing year-one walkthroughs with no design gaps.
- Coordinated SOX readiness for a business unit ahead of its spin-off, documenting 12 processes and 180 controls in 7 months.
Regulatory compliance and exams
- Mapped 1,100 regulatory obligations to policies and controls in a compliance library, giving each a named owner and testing frequency.
- Launched a regulatory change process that tracked 140 rule updates in a year, revising every affected procedure before its effective date.
- Raised annual code of conduct certification from 88% to 100% of 6,500 employees with manager dashboards and escalation.
Audit analytics and fraud
- Built a journal entry analytics routine that scans all 2.4 million entries a year for weekend postings, round amounts and unusual users.
- Investigated a hotline tip on overtime abuse, analyzing 2 years of timekeeping data and supporting 3 terminations and $96K recovered.
- Scored 1,200 third-party payments against FCPA red flags, sending 9 high-risk sales agents for enhanced due diligence.
IT audit and cybersecurity
- Audited AWS configurations against CIS Benchmarks, driving fixes for 31 high-risk findings, including public storage buckets and unencrypted volumes.
- Led an incident response audit with a CISO tabletop exercise that produced 7 playbook fixes and a new escalation matrix.
- Mapped 160 controls to ISO 27001:2022 and SOC 2 criteria in one framework, cutting duplicate evidence requests to engineering 40%.
Leadership and audit committee reporting
- Redesigned audit reports as a 1-page executive summary with risk ratings, cutting issuance time after fieldwork from 6 weeks to 3.
- Built a guest-auditor program that brought 10 finance and operations staff onto audits and filled 2 open auditor roles internally.
- Cleared a backlog of 70 overdue issue validations in one quarter, giving the audit committee its first fully current remediation status report.
Action verbs for a audit & compliance manager resume
Start each bullet with a precise verb instead of “responsible for”.
- Audited
- Assessed
- Tested
- Evaluated
- Remediated
- Investigated
- Monitored
- Documented
- Mapped
- Validated
- Reconciled
- Scoped
- Rationalized
- Designed
- Implemented
- Automated
- Streamlined
- Escalated
- Advised
- Briefed
- Presented
- Negotiated
- Trained
- Coached
- Directed
- Strengthened
- Recovered
- Prevented
Find more by category with the free action verb finder.
Best resume format for a audit & compliance manager
Use a reverse-chronological audit and compliance manager resume with a summary, a certifications band and roles grouped by title. Staff auditors, analysts and managers with under 10 years fit on 1 page. Managers with 10+ years, IT audit leads and directors can use 2 pages.
| Your situation | Format | Length | Lead with |
|---|---|---|---|
| Staff internal auditor or compliance analyst | Reverse-chronological | 1 page | CPA or CIA progress, cycles tested, analytics |
| Compliance manager (5-10 years) | Reverse-chronological | 1 page | Regulators, program scope, exams supported, CAMS, CRCM or CCEP |
| Audit or controls and compliance manager (10+ years) | Reverse-chronological | 2 pages | SOX scope, deficiencies avoided, team, audit committee reporting |
| IT audit manager | Reverse-chronological with a technical skills line | 1-2 pages | CISA, ITGCs, SOC reports, cloud and security frameworks |
| Audit director or director of compliance | Reverse-chronological with an executive summary | 2 pages | Function size, budget, board reporting, standards conformance |
| Career changer (public accounting, law, operations) | Hybrid: summary and relevant experience first | 1 page | Transferable audit, investigation or policy work |
Every example above follows these rules. Browse more layouts in our free resume templates.
How to write an audit manager or compliance manager resume that gets interviews
Hiring managers read an audit manager (or auditing manager) resume for scope first: how many controls, entities, regulators and audit cycles you owned. Put that scope in your summary and first bullets, then name the frameworks you actually applied, such as SOX, COSO, ISO 27001, GDPR or BSA/AML.
Tailor it to your level. Staff internal auditors emphasize testing, documentation and findings. A manager or senior compliance lead foregrounds program design, remediation, regulator relationships and team leadership. Use the posting’s title, whether Internal Auditor, Compliance Officer, Audit Manager or Risk and Compliance Manager.
Use a clean, reverse-chronological audit and compliance manager resume template with a tight summary and a certifications band (CPA, CIA, CISA, CRMA, CAMS). Then make every bullet evidence: findings closed, control gaps remediated, audit cycle time cut, exceptions or penalties avoided and dollars recovered.
Compliance manager resume vs. audit manager resume: what to emphasize
An audit manager resume proves independent assurance: the audit plan, testing quality, findings and how management acted on them. A compliance manager resume proves the program works every day: risk assessments, policies, training, monitoring, investigations and regulatory exams.
Hybrid roles sit in between. A resume for controls and compliance manager roles should lead with SOX or control framework ownership and remediation results. A risk and compliance manager resume adds the risk register, key risk indicators, third-party risk and how you report risk to a committee.
An IT audit manager resume adds ITGCs, SOC reports, cloud platforms and cybersecurity frameworks such as NIST CSF 2.0. Whatever the mix, name the regulator or standard beside each result so a reader can judge your exact scope.
What audit directors and chief compliance officers look for
Leaders hiring an internal audit manager or compliance manager look for judgment and influence: can you find what matters, explain it to executives and get it fixed? Show that evidence on the page.
- Scope: key controls, audits a year, entities, regulators and business units covered
- Outcomes: deficiencies avoided, repeat findings cut, recoveries and losses prevented
- Standards: COSO, the IIA’s Global Internal Audit Standards, NIST CSF, ISO 27001 or the OIG’s compliance guidance, where they apply
- Influence: audit committee or board reporting, remediation adopted, policies and training rolled out
- Leadership: team size, coaching, co-source partners and budget
- Analytics: full-population testing, continuous monitoring and the tools you used
Moving into your first audit or compliance manager role
If you are a senior auditor or analyst without the manager title, show the manager-level work you already do: leading engagements, reviewing workpapers, coaching staff, presenting findings and owning remediation follow-up. That is exactly what employers hiring a first-time manager look for.
Coming from public accounting? Translate client audits into industry terms: ICFR walkthroughs, control testing, IT-dependent manual controls and the industries you served. Coming from law or operations? Lead with investigations, policy writing and regulatory exam support.
Audit and compliance resume keywords for ATS
Applicant tracking systems match the exact terms in the posting, so mirror its frameworks, regulators and tools wherever they are true for you. Spell out each acronym once, such as Certified Internal Auditor (CIA).
- Audit: internal audit, risk-based audit plan, SOX 404, ICFR, ITGC, walkthroughs, control testing, remediation
- Compliance: compliance program, risk assessment, monitoring and testing, policies and procedures, investigations, training
- Frameworks and rules: COSO, COBIT, NIST CSF, ISO 27001, BSA/AML, OFAC, HIPAA, GDPR, PCI DSS
- Credentials: CPA, CIA, CISA, CRISC, CAMS, CRCM, CCEP, CHC, CFE
- Tools: AuditBoard, TeamMate+, Workiva, Archer, ServiceNow IRM, ACL, IDEA, SQL, Power BI
Audit and compliance manager resume: what to include vs. what to avoid
| ✓ Include | ✗ Avoid |
|---|---|
| SOX, COSO and control framework experience, with the number of key controls you owned | Vague duties like “ensured compliance” with no scope or result |
| Quantified remediation: findings closed, repeat findings cut and deficiencies avoided | Confidential client or company names and nonpublic findings |
| Certifications (CIA, CISA, CPA, CRMA, CAMS, CRCM) with the issuing body | Unexplained acronyms or in-house program names with no context |
| GRC and audit tools (AuditBoard, ACL, TeamMate+, Archer) plus analytics such as SQL or Power BI | Listing every regulation without your role in applying it |
| Regulators and exams you supported, such as the SEC, FINRA, OCC, state regulators or OIG | Claiming sole credit for team results; say led or co-led accurately |
| Audit committee, board or risk committee reporting | Credentials in progress presented as earned |
| Team size, co-source partners and budget for manager and director roles | Dense paragraphs of methodology instead of results |
| Context for each employer: industry, size, and whether it is public or regulated | Multi-column templates and graphics that ATS parsers misread |
How to write an audit and compliance manager resume
- Lead with scope and frameworks. Open with a 3 to 4 sentence summary stating the controls, regulations and business areas you cover, for example SOX testing across finance, IT and procurement, plus your years of experience and strongest credential.
- Group your audit and compliance roles. Use reverse-chronological order and clear titles such as Internal Auditor, Compliance Officer or Audit Manager so reviewers see your progression. Under each employer, give context: industry, size and whether it is public or regulated.
- Quantify your audit outcomes. Show impact with numbers, for example “Remediated 40+ control gaps and reduced audit cycle time by 30%” or “Maintained zero material findings across three SOX cycles.” Add recoveries, exam support and repeat findings cut.
- Surface certifications and tools. Add a dedicated band for CIA, CISA, CPA, CRMA or CAMS and the GRC and analytics tools you use, so ATS systems and recruiters match you instantly. List credentials in progress with the parts passed.
- Show influence and leadership. Add audit committee or board reporting, remediation you drove with process owners, training you delivered and the team you lead or coach. These separate a manager from a strong individual auditor.
- Tailor to the posting. Mirror the job’s title, frameworks, regulators and tools where they are true for you: SOX and ITGCs for an IT audit manager, BSA/AML and exam support for a bank compliance manager.
- Check format and ATS fit. Use a single-column layout with standard headings, save it as PDF or DOCX as requested, and run it through an ATS checker to confirm your keywords, dates and certifications parse cleanly.
Audit & Compliance Manager salary and job outlook
National figures for compliance managers. Use them to benchmark offers, not as a promise for any single job.
Employment is projected to grow faster than average (5% to 6%) from 2025 to 2035, with about 100,900 openings each year.
Source: U.S. Bureau of Labor Statistics 2025 wage data and 2025-2035 employment projections, via O*NET OnLine, Compliance Managers (11-9199.02). Pay varies by state, employer and experience.
Cover letter tip for a audit & compliance manager
Open with the program or audit scope the posting names and one result that fits it, such as cutting repeat findings or preparing a clean regulatory exam response. Mention your strongest credential, the frameworks you own and how you work with process owners, then close by asking to discuss the audit plan or compliance priorities.
Start from our cover letter templates or draft one in seconds with the cover letter generator.
By uploading my resume, I agree to the
