Senior Cybersecurity Auditor
Role details
Job location
Tech stack
Job description
We are seeking a Senior Cybersecurity Auditor to join its Internal Audit function. This role operates within a high-performing, globally distributed audit team responsible for evaluating risk, improving controls, and driving measurable business value across enterprise operations and technology environments.
Operates at significant scale, serving millions of customers across multiple regions, with diverse business operations spanning retail, e-commerce, and corporate functions.
- Partner with business and technology leaders to identify, assess, and mitigate risk across the enterprise
- Design and execute audit programs covering:
- Cybersecurity controls
- IT general controls
- Operational and financial processes
- Focus on high-risk areas across end-to-end business processes (e.g., sourcing, logistics, and digital platforms)
- Evaluate effectiveness of internal controls and provide actionable recommendations
- Communicate audit findings and insights to senior leadership clearly and concisely
- Contribute to continuous improvement of audit methodologies and practices
- Build strong relationships with stakeholders to remain aligned with evolving business risks
- Participate in ongoing professional development, training, and knowledge-sharing initiatives
Requirements
Applicants must be legally authorized to work in the United States. Visa sponsorship not available., * 5+ years of experience in one or more of the following:
- Cybersecurity
- IT audit
- Technology consulting
- Experience working in large, complex, or multinational environments
- Familiarity with cybersecurity frameworks such as:
- ISO 27001
- NIST
- CIS Controls
- Experience with:
- Cloud security Controls (Azure preferred)
- Identity & Access Management Controls
- Network security
- Vulnerability management
- Application and infrastructure security
- Third-party risk/security
- CISSP, CISM, CISA, or comparable industry certifications
- Strong analytical and critical thinking skills
- Ability to independently assess complex technical and business risks
- Excellent written and verbal communication skills
- Ability to translate technical findings into business-relevant insights
- Strong project management skills with the ability to manage multiple priorities
- Collaborative mindset with experience working in cross-functional and international teams
- Solid business acumen and understanding of enterprise operations
- Hands-on experience leading or participating in complex cybersecurity or IT audits
- Understanding of modern technology trends (e.g., data analytics, automation, AI/ML impacts on business processes)
- Awareness of evolving threat landscapes and control design principles
- Retail Industry Experience
Benefits & conditions
The final salary or hourly wage, as applicable, paid to each candidate/applicant for this position is ultimately dependent on a variety of factors, including, but not limited to, the candidate's/applicant's qualifications, skills, and level of experience as well as the geographical location of the position.