Cyber Security And Audit Manager 839483
Automate your job search with Sonara.
Submit 10x as many applications with less effort than one manual application.1
Reclaim your time by letting our AI handle the grunt work of job searching.
We continuously scan millions of openings to find your top matches.
Overview
Job Description
Global Manufacturing company is seeking a Senior Cyber Security and Audit Manager. The Senior Manager leads complex cyber security audits, evaluates emerging technology risks, advises management on strategic technology initiatives, and helps strengthen the Company's overall cyber posture while maintaining the independence required of the Internal Audit function. While the role will have familiarity with IT General Controls (ITGCs), its primary focus is evaluating enterprise cybersecurity capabilities, technology risk management, operational resilience, and emerging technology risks.
Key ResponsibilitiesCybersecurity & Technology Risk Leadership
? Lead the development and execution of the Company's cybersecurity andtechnology risk audit strategy as part of the annual risk-based Internal Audit Plan.
? Serve as the Internal Audit subject matter expert on cybersecurity, technologyrisk, and digital transformation.
? Partner with the Vice President of Internal Audit to identify emerging technologyand cybersecurity risks and incorporate them into the annual audit plan.
? Continuously monitor the external cyber threat landscape, evolving regulatoryrequirements, and emerging technologies to ensure audit coverage remainsaligned with enterprise risks.
? Coordinate cybersecurity audit activities with external specialists, co-sourcedproviders, and external auditors as appropriate.
Cybersecurity AssuranceLead independent assessments of the design and operating effectiveness of controls across areas including:
? Cybersecurity Governance
? Security Operations (SOC)
? Identity & Access Management (IAM)
? Privileged Access Management (PAM)
? Cloud Security (AWS, Azure, GCP)
? Network and Infrastructure Security
? Endpoint Security
? Vulnerability & Patch Management
? Threat Detection & Incident Response
? Data Protection & Encryption
? Third-Party & Supply Chain Cyber Risk
? Disaster Recovery & Business Continuity
? Operational Technology (OT/ICS), where applicable
? Artificial Intelligence (AI) Governance and Security
? Secure Software Development (DevSecOps)
QualificationsEducationBachelors degree in Information Systems, Cybersecurity, Computer Science,Information Technology, Engineering, Accounting, or another related STEM discipline.Masters degree preferred.Professional CertificationsOne or more of the following certifications is required:
? Certified Information Systems Auditor (CISA)
? Certified Information Systems Security Professional (CISSP)
? Certified Information Security Manager (CISM)
? Certified in Risk and Information Systems Control (CRISC)
? Certified Internal Auditor (CIA)Additional certifications such as CCSP, GIAC, CEH, Security+, or cloud securitycertifications are preferred.
Experience
? 8-12+ years of progressive experience in cybersecurity, technology risk, cyberconsulting, cyber assurance, or IT audit, with a significant focus on enterprisecybersecurity.
? Experience within a Fortune 500, Big Four Cyber Risk practice, or leadingcybersecurity consulting firm strongly preferred.
? Demonstrated experience leading complex cybersecurity audits and advisoryengagements across large, global organizations.
? Experience evaluating enterprise cybersecurity programs, cloud security, cyberresilience, operational resilience, and technology governance.
? Working knowledge of IT General Controls (ITGCs) and SOX requirements, withthe ability to coordinate effectively with audit leaders responsible for ITGCassurance.
? Deep knowledge of cybersecurity frameworks including NIST CSF, NIST 800-53,ISO 27001, CIS Controls, COBIT, and applicable cybersecurity and privacyregulations.
? Experience partnering with Chief Information Security Officers, technologyexecutives, and business leadership on cybersecurity risk management andgovernance.
? Strong executive presence with exceptional communication, presentation,stakeholder management, and report-writing skills.
? Demonstrated ability to translate complex technical risks into clear businessimpacts and actionable recommendations.
? Experience leveraging data analytics, automation, and continuous monitoring toenhance audit effectiveness.
Automate your job search with Sonara.
Submit 10x as many applications with less effort than one manual application.
