> Markdown version of [/jobs/ext/4605526-it-senior-associate-information-systems-internal-audit-pvh-corp](https://www.wearedevelopers.com/jobs/ext/4605526-it-senior-associate-information-systems-internal-audit-pvh-corp). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # IT Senior Associate, Information Systems Internal Audit - PVH Corp. - **Company:** PVH Corp. - **Location:** New York, NY, United States (Remote available) - **Experience:** Expert - **Salary:** $82,500 - $117,100 - **Contract:** Permanent contract - **Skills:** Microsoft Access, Artificial Intelligence, Data Analysis, Backup Devices, Software as a Service, Cloud Computing, Configuration Management, Control Objectives for Information and Related Technology (COBIT), Cyber Security, Information Systems, Computer Programming, Databases, Data Governance, Data Infrastructure, Data Migration, Disaster Recovery, Information Security Management, Information Technology Audit, Information Systems Security Architecture Professional, Network Security, Microsoft Copilot, SAP (Applications), Software Engineering, Systems Integration, Software Vulnerability Management, Data Logging, Enterprise Software Applications, Warehouse Management Systems, RISE with SAP, Information Technology, Data Analytics, Patch Management, SAP S/4HANA, Cloud Migration, Claude, GPT - **Published:** November 6, 2026 - **Apply:** https://www.careerbuilder.com/job-details/it-senior-associate-information-systems-internal-audit-pvh-corp-new-york-ny--0cd677b5-1433-4301-ab16-90d14bb16c99 ## About the Role Systems/Internals Programming, Internal Audit, Information Technology/Systems Audit, Vision Plan, Diversity, Risk, Internal Audit, Risk Management, Technical Operations, Systems/Internals Programming, * At least three years of experience in IT audit, technology risk, cybersecurity, IT compliance, information security, risk advisory, technology operations, or internal audit. Experience conducting risk-based IT audits, operational reviews, or advisory engagements is preferred. * Experience in a multinational, retail, apparel, consumer products, or complex technology environment is preferred. Exposure to SAP, SAP S/4HANA, SAP RISE, or other major enterprise platforms is helpful but is not required for this role. * Bachelor's degree in Information Systems, Computer Science, Cybersecurity, Accounting, Finance, Audit, or a related field. * Working knowledge of risk-based IT auditing, technology risk management, and control evaluation concepts. * Understanding of technology risks across information security, cloud and infrastructure, application development, service management, data, third parties, business continuity, and disaster recovery. * Ability to evaluate policies, procedures, governance processes, roles and responsibilities, operational performance, and the design and operating effectiveness of controls. * Ability to assess technology implementations and transformations, including project governance, requirements, testing, data migration, interfaces, cutover, security, and operational readiness. * Ability to review cybersecurity practices and identify potential gaps within access and privileged access, vulnerability management, security monitoring, incident response, secure configuration, and data protection. * Ability to analyze data and use technology-enabled audit techniques to identify trends, anomalies, control gaps, and opportunities for improved monitoring. * Experience leveraging AI-enabled tools such as ChatGPT, Claude, Microsoft Copilot, or similar technologies to improve audit efficiency through automating or streamline testing and documentation with appropriate validation and human oversight. * Ability to document process narratives, risks, controls, test plans, evidence evaluation, exceptions, root causes, and recommendations with attention to quality and detail. * Strong analytical thinking, problem solving, and judgment, including the ability to assess business impact and distinguish significant risks from routine operational issues. * Strong written and verbal communication skills, with the ability to explain complex technology topics to technical and non-technical stakeholders. * Ability to manage multiple assignments concurrently, meet deadlines, adapt to changing priorities, and communicate status proactively. * Ability to work effectively with global teams, outsourced resources, external specialists, and stakeholders across multiple regions and time zones. * Familiarity with AuditBoard or similar audit management and workpaper platforms. * Knowledge of COBIT, NIST, ISO 27001, ITIL, COSO, or other relevant technology risk and control frameworks preferred. Certifications * Certified Information Systems Auditor (CISA) preferred; active progress toward the CISA may be considered. * Certified Internal Auditor (CIA), Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified in Risk and Information Systems Control (CRISC), ITIL, PMP, or another relevant certification is a plus. ## Description The IT Senior Associate, Information Systems Internal Audit supports independent, objective assurance and advisory services designed to add value and improve PVH's technology operations, risk management, and control environment. This hybrid role performs risk-based audits and advisory reviews across global technology, information security, infrastructure, applications, data, third-party services, and major technology initiatives. The Senior Associate helps evaluate whether technology risks are understood and managed, controls are appropriately designed and operating as intended, and projects are implemented with appropriate governance, security, resilience, and operational readiness. The role partners with Internal Audit leadership, IT, Information Security, Finance, Operations, project teams, and external specialists to understand risks, document results, communicate practical recommendations, and support timely remediation. This position is primarily focused on non-SOX IT audit and advisory work. The role may coordinate with the IT SOX team when technology risks or controls overlap, but it is not the primary owner of IT SOX testing. The ideal candidate is curious, comfortable working across technical and business teams, and able to translate complex technology issues into clear business implications. What You'll Do: * Execute assigned risk-based IT audits, operational reviews, and advisory engagements across global technology, information security, infrastructure, applications, data, and service management processes. * Support engagement planning and risk assessment activities by understanding business objectives, technology dependencies, key risks, and the control environment. * Perform interviews, walkthroughs, process analysis, control evaluation, data analysis, evidence review, and testing in accordance with PVH methodology and professional standards. * Evaluate technology governance and operating processes, including policies, procedures, roles and responsibilities, service management, asset and configuration management, architecture, and technology risk reporting. * Review information security practices, including identity and privileged access, vulnerability and patch management, secure configuration, endpoint and network security, logging and monitoring, incident response, and data protection. * Assess cloud, infrastructure, application, and data environments, including SaaS platforms, databases, networks, integrations, warehouse management systems, and other enterprise technology platforms. * Support pre-implementation and post-implementation reviews of major technology initiatives, including cloud migrations, ERP and enterprise application changes, system integrations, data migrations, cutovers, and operational transitions. * Evaluate project governance, requirements, testing, security, data quality, change readiness, training, support models, resilience, and post-implementation monitoring. * Review third-party technology and managed service relationships, including vendor governance, service-level expectations, SOC reports, incident management, access, data protection, business continuity, and exit planning. * Assess disaster recovery, business continuity, backup and restoration, technology resilience, crisis management, and recovery testing practices. * Support reviews of data governance, privacy-related technology processes, responsible AI, analytics, automation, and other emerging technology risks as assigned. * Prepare clear audit workpapers, process narratives, risk assessments, testing summaries, issue descriptions, and practical recommendations aligned to PVH methodology and professional standards. * Identify root causes, control gaps, process inefficiencies, and emerging risks, and communicate their potential business impact to audit management and stakeholders. * Support remediation monitoring by evaluating management action plans, validating corrective actions, and maintaining status updates for audit findings and recommendations. * Partner with IT, Information Security, Finance, Operations, project teams, business stakeholders, external auditors, and third-party service providers to support evidence gathering and issue resolution. * Use data analytics, automation, and other technology-enabled approaches to improve audit coverage, monitor risk indicators, and identify unusual activity or changes in key processes. * Contribute to annual risk assessments, audit planning, continuous monitoring, and improvements to audit programs, templates, and testing approaches. * Stay current on technology, cybersecurity, cloud, data, privacy, artificial intelligence, regulatory, and IT audit leading practices, and share relevant insights with the team. * Demonstrate PVH values by working collaboratively, communicating professionally, and supporting a diverse and inclusive team environment.