About the Role
You will lead the global IT and security audit program across regions owning the multi year IT and security audit roadmap and strengthening how technology risks are identified evaluated and mitigated You will shape executive level reporting on control effectiveness and partner with technology and security leadership to provide independent challenge on major initiatives You will drive continuous improvement through data analytics automation and generative AI to modernize IT and security audit execution including continuous monitoring and automated evidence retrieval
Requirements
- 12+ years of experience in internal audit with deep focus on IT and information security or in first line second line technology security roles with significant controls and audit exposure
- Demonstrated success leading global cross functional IT audit portfolios spanning cloud infrastructure cybersecurity and third party risk across multiple regulatory jurisdictions
- Deep technical knowledge of cloud based technology stacks software development lifecycles cloud security configurations and enterprise IT operations risks and controls
- Relevant professional certifications such as CISA CISSP CIA CPA and working fluency with frameworks such as NIST COBIT and ITIL
- Proven leadership experience building mentoring and managing global audit teams including co sourced resources and indirect reports across time zones
- Utilizes generative AI responsibly maintaining human oversight to deliver business ready outputs and drive measurable improvements in workflow efficiency cost and quality
Responsibilities
- Own the end to end delivery of complex cross functional IT and security audits covering cloud infrastructure security operations identity and access management data protection vendor third party risk and key products and services
- Lead and develop a high performing global team of internal auditors and co sourced resources setting goals coaching talent managing performance and building succession pipelines across regions
- Drive integrated assurance across the three lines of defense by partnering with first and second line risk compliance security and technology teams to rationalize testing and maximize control coverage
- Shape executive level reporting on technology and security control effectiveness distilling key themes emerging risks and root causes into clear materials for senior management the Head of Internal Audit and the Audit Committee
- Partner with technology and security leadership across Engineering Security Infrastructure and Product to provide independent challenge on major initiatives without compromising third line independence
- Build continuous improvement into the audit function by driving adoption of data analytics automation and generative AI to modernize IT and security audit execution including continuous monitoring and automated evidence retrieval
Benefits
- Equity and bonus eligibility
- Medical insurance
- Dental insurance
- Vision insurance
- 401(k) retirement plan