Senior Manager, IT Audit

ELC Beauty LLC•New York, NY

8d•$122,900 - $190,000

About The Position

The Senior Manager, IT Internal Audit will lead global technology risk assessments, audit planning, and complex IT audit engagements across The Estée Lauder Companies’ brands, regions, and corporate functions. The role evaluates technology, cybersecurity, cloud, application, infrastructure, and data-related risks; provides practical advisory insights to senior stakeholders; oversees remediation follow-up; and contributes to the development of a risk-based global internal audit plan. The position assesses controls across a range of technology environments and uses data analytics and automation to support audit testing and generate data-driven insights. It also involves preparing audit reports and presentations, managing multiple engagements in a fast-paced global environment, and improving IT audit methodologies, tools, and risk assessment practices.

Requirements

At least 8 years of experience in IT internal audit, IT risk management, IT compliance, cybersecurity, or IT assurance and advisory services.
Bachelor’s degree in computer science, information systems, engineering, data science, or a related field.
Proven experience leading complex projects and working independently and collaboratively in cross-functional teams.
Strong knowledge of technology, cybersecurity, cloud, application, infrastructure, and/or privacy risks.
Familiarity with relevant frameworks and standards such as COSO, COBIT, ISO 27001, NIST, and ITIL.
Demonstrated project management and organizational skills, with the ability to manage multiple priorities.
Excellent written, verbal, presentation, and relationship-management skills.

Nice To Haves

CISA, CISM, CISSP, CIA, CPA, or another relevant certification, completed or in progress.
Experience with SQL, Alteryx, Power BI, or other audit analytics tools.
Experience in consumer products, retail, manufacturing, or supply chain industries.
Knowledge of application security, network security, cloud security, and secure software development practices.
Experience working in a global or multinational organization.

Responsibilities

Lead global IT and cybersecurity risk assessments and contribute to the risk-based annual internal audit plan.
Plan and oversee complex IT audit and advisory engagements from scoping through reporting and remediation validation.
Assess technology risks across cybersecurity, retail, e-commerce, finance, manufacturing, supply chain, cloud, infrastructure, and business applications.
Evaluate controls across Microsoft Azure, Amazon Web Services, Google Cloud, Windows, UNIX/Linux, Oracle, SAP, Hyperion, and internally developed applications.
Oversee audit follow-up, including remediation tracking, validation, escalation, and reporting.
Build and maintain working relationships with senior stakeholders across technology, cybersecurity, privacy, finance, and business functions.
Collaborate with internal and external stakeholders to identify risks, develop practical recommendations, and support sustainable solutions.
Use data analytics and automation tools, including SQL, Alteryx, and Power BI, to support audit testing and generate data-driven insights.
Prepare clear, concise audit reports and presentations summarizing work performed, findings, risks, and recommendations.
Manage multiple engagements and priorities in a fast-paced, global environment.
Contribute to continuous improvement of IT audit methodologies, tools, and risk assessment practices.

Benefits

Participation in a bonus program, with the possibility of overachievement based on performance and company results.
Participation in the share incentive plan.
Health insurance coverage, including medical, dental, and vision insurance.
Wellness and family support programs.
Life and disability insurance.
Retirement savings plans.
Paid leave programs.
Education-related programs.
Paid holidays and vacation time.
Many benefits are subsidized or fully paid for by the company.