Senior Internal Audit Manager — Technology Risk, Cybersecurity & AI Assurance

Applied Materials•Austin, TX

18d•$140,000 - $192,500

About The Position

Applied Materials is hiring a Senior Internal Audit Manager to lead complex technology audits and help transform Global Internal Audit’s technology assurance practice. The role provides independent assurance over technology, cybersecurity, and AI risk across a global manufacturing, laboratory, and R&D environment. IT audit is the primary focus, complemented by advisory work and AI enablement. The manager partners with leaders across Global Information Services, including the Chief Information Security Officer and Chief Data Officer organizations, and reports to the Senior Director who leads IT Audit, Audit Analytics, and Enterprise Risk Management. The role influences across organizational boundaries, leads cross-functional teams, directs third-party specialists, and helps advance the practice’s methods, tools, and scope. It also advises the business on areas such as cyber resilience, supplier cyber risk, and data governance, and assures major technology and platform transformation programs. The position is suited to candidates with experience in IT operations and infrastructure, cybersecurity, information security, technology risk, or IT audit. Applied Materials is particularly interested in professionals who have worked on both sides of controls—in operations and assurance. Deep specialization in a single technology is not required, but the manager should be able to engage substantively with technical discussions and exercise sound judgment in emerging areas such as AI.

Requirements

Bachelor’s degree in Management Information Systems, Computer Science, Cybersecurity, Engineering, or a related field.
At least 10 years of progressive experience in IT operations and infrastructure, cybersecurity, information security, technology risk, security operations, or IT audit.
Experience leading complex technology audits or security and control programs.
Experience leading cross-functional teams and directing third-party specialists.
Ability to connect technology risk to business strategy, operations, and financial outcomes and frame it in terms leaders can act on.
Ability to build alignment and influence without direct authority across technology, security, business, and operations.
Ability to establish credibility with technical partners, explain complex technical risk to audiences ranging from subject matter experts to executive leadership, and defend conclusions under detailed technical questioning.
Ability to translate ambiguous direction into well-scoped plans, focus technical work where risk is concentrated, and exercise sound judgment in emerging areas.
Knowledge of technology risk and controls across IT operations, infrastructure, networks, endpoints, enterprise platforms, IT general controls, and IT application controls.
Knowledge of cybersecurity operations and architecture, including threat and vulnerability management, security monitoring and incident response, identity and access management, and data protection.
Knowledge of cloud platforms and security, including Microsoft Azure, AWS, and GCP, as well as cloud identity, configuration management, and workload protection.
Knowledge of enterprise AI architecture and AI risk and controls, including foundation models, RAG pipelines, orchestration and multi-agent workflows, MCP servers and gateways, AI embedded in purchased software, AI inventories, non-human identities, shadow AI, prompt injection, data exfiltration, permission inheritance, human-in-the-loop checkpoints, and agent-action traceability.
Knowledge of relevant frameworks and regulations, including the NIST AI Risk Management Framework, ISO/IEC 42001, the EU AI Act, the NIST Cybersecurity Framework, ISO/IEC 27001, COBIT, and CIS Controls.
Knowledge of internal audit methodology, risk-based audit planning, controls design and testing, IIA standards, and external audit methodology and coordination.

Nice To Haves

A master’s degree in a technical discipline.
Big Four or comparable technology or cyber risk experience.
Professional certification such as CISA, CISSP, CISM, CRISC, CCSP, CGEIT, PMP, or ISACA Advanced in AI Audit (AAIA).
Experience in semiconductor, advanced manufacturing, or another intellectual-property-intensive industry.

Responsibilities

Lead complex IT audits across infrastructure, network and endpoint security, identity and access management, cloud platforms and security, application controls, data protection, resilience, and site, laboratory, and operational technology security.
Lead risk interviews across business and technology organizations, prioritize the technology audit slate, and develop actionable audit plans.
Shape the technology risk agenda with Global Information Services, business, and operations partners; build alignment with senior leadership and a shared vision within the IT Audit team.
Lead cross-functional teams, including Global Internal Audit auditors, guest auditors from business and technical functions, and external contractors and consultants.
Direct co-sourcing partners, staff augmentation, and specialist providers across technology, security, and governance, including penetration testing, red and purple team exercises, and targeted technical assessments.
Assure AI used across the business, including agentic AI and citizen-developed tools, for security, appropriate controls, governance, and alignment with applicable regulations.
Advance the use of AI across the audit lifecycle, including risk assessment, execution, continuous monitoring, control automation, reporting, quality assurance, and analytics; help deploy modern audit methods and tools, including agile auditing.
Advise the business on cyber resilience, supplier cyber risk, and data governance.
Provide independent assurance over major technology and platform transformation programs, partnering across all Global Internal Audit pillars.
Coach and develop IT audit professionals, build technical depth across the team, and improve the practice.