Cybersecurity Auditor – Identity & Access Management

Coca-Cola • Atlanta, GA

11d

About The Position

The Coca-Cola Company is seeking an Information Technology Auditor with deep cybersecurity expertise to join its Internal Audit team. The role serves as a Cybersecurity Subject Matter Expert, conducting audits and advisory activities related to cybersecurity, IT compliance, and technology risk. It assesses technology controls across cloud platforms, digital ecosystems, industrial control systems, and data privacy frameworks, and partners with senior IT and security leaders to identify risks, evaluate controls, and support compliance with recognized standards, including SOX requirements.

The position contributes to technology audit strategies, independently performs control testing, applies frameworks such as NIST, PCI, and COBIT, and communicates findings and recommendations. It also collaborates with stakeholders on remediation, monitors changes in technology and cyber threats, and helps improve audit methodologies, including through analytics and automation. This is an individual contributor role with no direct reports, based in Atlanta, Georgia, and requiring domestic and international travel of approximately 26–50%.

Requirements

• Bachelor’s degree in Cybersecurity, Information Assurance, Computer Science, or a related discipline.
• 3–4 years of experience in cybersecurity, IT audit, security engineering, or technology-focused public accounting engagements.
• Strong knowledge of IT control frameworks, including COBIT, PCI DSS, and NIST, and ability to apply them in risk-based auditing environments.
• Familiarity with technologies including SAP ECC/HANA, SAP GRC, Active Directory, RedHat Linux, Windows OS, Oracle Database, MS SQL Server, AWS, Azure Cloud, Microsoft 365, Palo Alto Networks, and network/ICS equipment.
• Understanding of general IT control principles, including security operations, system administration, program governance, change management, and privacy standards.
• Proficiency across modern development models such as DevOps and Agile, and awareness of data governance and incident management processes.
• Strong analytical and quantitative ability, including comfort working with probabilities, ratios, and statistical measures to identify risk trends.
• Excellent communication and interpersonal skills, including the ability to present risks clearly, negotiate corrective actions, and engage stakeholders at all levels.
• Ability to travel up to 30% domestically and internationally, with flexibility to accommodate department needs and extended projects.
• Demonstrated initiative and aptitude for learning new technologies and adapting to evolving business environments with minimal supervision.
• Must be currently authorized to work in the United States on a full-time basis and must not require company sponsorship to continue working legally in the United States.

Nice To Haves

• Professional certification such as CISA, CISSP, or CISM.
• Additional technical credentials such as CEH or OSCP.

Responsibilities

• Serve as an internal Cybersecurity SME within Internal Audit, conducting cybersecurity, IT compliance, and technology risk audits and advisory activities.
• Develop audit strategies for technology-focused engagements, contributing methodologies and risk-based approaches aligned with prior audit results.
• Interview process and business owners to understand operational practices, expected controls, and potential vulnerabilities.
• Independently execute audit tests to assess the effectiveness of security measures, IT controls, and governance processes across global environments.
• Apply frameworks such as NIST, PCI, and COBIT to assess cybersecurity posture and recommend control enhancements.
• Analyze findings with professional skepticism and risk awareness, document conclusions, and ensure recommendations address root causes.
• Prepare detailed audit reports communicating observations, risk implications, and corrective actions.
• Collaborate with IT leaders and stakeholders on remediation plans for identified gaps, aligned with business priorities and compliance standards.
• Monitor evolving technologies and cybersecurity threats to inform audit scope and focus.
• Contribute to continuous improvement of audit methodologies and ideas for using analytics and automation in audit processes.

Benefits

• A full range of medical, financial, and/or other benefits, dependent on the position.
• Opportunity to expand a global network through development, learning, and connections with talent around the world.
• Agile work environment that empowers employees to innovate and discover solutions.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level