IT Auditor III

Marathon Petroleum Corporation•Findlay, OH

1d•Hybrid

About The Position

At MPC, we’re committed to being a great place to work – one that welcomes new ideas, encourages diverse perspectives, develops our people, and fosters a collaborative team environment. Position Summary: Marathon Petroleum’s Audit Assurance and Advisory Services (3A) team is part detective, part coach, and always focused on helping the business run better. As an IT Auditor III / Senior Auditor on the 3A IT Audit team, you’ll partner with Cybersecurity, IT, and Operational Technology (OT) leaders to help assess and strengthen technology risks and controls across connected environments—while supporting digitization efforts across the business. Expect a mix of assurance and advisory work, a lot of cross-team collaboration, and plenty of room to innovate—using data analytics, automation, and emerging AI tools to work smarter, move faster, and deliver insights that teams can actually use. You’ll grow and develop here—through hands-on learning, mentoring, and formal training—plus support to pursue certifications. And the benefits are built to back you up: hybrid flexibility, generous time off, a 401(k) match (117% company match on up to 6% contribution), a Cash Balance Pension contribution (7% / 9% / 11% based on age and years of service), and eligibility for an annual cash bonus (target 12%).

Requirements

Bachelor’s degree required: B.S. in Accounting, Business-related majors, Computer Science, Management Information Systems, Data Analytics, Cybersecurity, or other IT related degree.
4-9 years of information systems, audit, or business experience is required, with a strong background of knowledge in IT technologies and applications.

Nice To Haves

Experience applying AI and automation (e.g., analytics, scripting, workflow automation, or GenAI-enabled tools) to improve risk identification, testing efficiency, and insight.
Experience with Cybersecurity and Cloud Security (Azure and/or AWS) concepts and controls (e.g., identity and access management, logging/monitoring, vulnerability management, secure configuration, and incident response).
Operational Technology (OT) exposure or experience (e.g., industrial control systems, SCADA/DCS environments, OT networking/segmentation, or ICS security).
Professional certification is preferred (pursuing or achieved): Certified Internal Auditor (CIA), Certified Information Systems Auditor (CISA), Certified Information Systems Security Professional (CISSP), Cybersecurity, or other related industry certifications.
Master’s degree preferred (e.g., MBA, Information Technology, Analytics/Data Science, Cybersecurity, or related field).

Responsibilities

Lead (or co-lead) risk-based audits across Cybersecurity, IT, and OT—focusing on what could break, what protects us, and what needs to get better.
Plan, scope, and execute testing of applications, platforms, and operating procedures—then translate results into clear, actionable recommendations.
Deliver advisory support for new or changing technologies (systems, integrations, cloud, and OT-related changes) to help strengthen control design before go-live.
Partner with stakeholders to understand digitization initiatives and help teams build secure, well-controlled processes that still move at business speed.
Use data analytics, automation, and emerging AI tools to improve audit efficiency, expand coverage, and surface sharper insights.
Present findings and recommendations with confidence—building trust, influencing outcomes, and keeping leadership informed.

Benefits

hybrid flexibility
generous time off
a 401(k) match (117% company match on up to 6% contribution)
a Cash Balance Pension contribution (7% / 9% / 11% based on age and years of service)
eligibility for an annual cash bonus (target 12%)
access to health, vision, and dental insurance
paid time off
401k matching program
paid parental leave
educational reimbursement