Senior Manager, IT Audit

DECIEM • Long Island, NY

7d

About The Position

The Senior Manager, IT Internal Audit will lead global technology risk assessments, audit planning, and complex IT audit engagements across The Estée Lauder Companies’ brands, regions, and corporate functions. The role evaluates technology, cybersecurity, cloud, application, infrastructure, and data-related risks; provides practical advisory insights to senior stakeholders; oversees remediation follow-up; and contributes to a risk-based global internal audit plan.

The position also uses data analytics and automation to support audit testing, prepares audit reports and presentations, manages multiple engagements in a fast-paced global environment, and helps improve IT audit methodologies, tools, and risk assessment practices.

Requirements

• 8 or more years of experience in IT internal audit, IT risk management, IT compliance, cybersecurity, or IT assurance and advisory services.
• Bachelor’s degree in computer science, information systems, engineering, data science, or a related field.
• Proven experience leading complex projects and working independently and collaboratively in cross-functional teams.
• Strong knowledge of technology, cybersecurity, cloud, application, infrastructure, and/or privacy risks.
• Familiarity with relevant frameworks and standards, such as COSO, COBIT, ISO 27001, NIST, and ITIL.
• Demonstrated project management and organizational skills, with the ability to manage multiple priorities.
• Excellent written, verbal, presentation, and relationship-management skills.

Nice To Haves

• CISA, CISM, CISSP, CIA, CPA, or another relevant certification, completed or in progress.
• Experience with SQL, Alteryx, Power BI, or other audit analytics tools.
• Experience in consumer products, retail, manufacturing, or supply chain industries.
• Knowledge of application security, network security, cloud security, and secure software development practices.
• Experience working in a global or multinational organization.

Responsibilities

• Lead global IT and cybersecurity risk assessments and contribute to the risk-based annual internal audit plan.
• Plan and oversee complex IT audit and advisory engagements from scoping through reporting and remediation validation.
• Assess technology risks across cybersecurity, retail, e-commerce, finance, manufacturing, supply chain, cloud, infrastructure, and business applications.
• Evaluate controls across Microsoft Azure, Amazon Web Services, Google Cloud, Windows, UNIX/Linux, Oracle, SAP, Hyperion, and internally developed applications.
• Oversee audit follow-up, including remediation tracking, validation, escalation, and reporting.
• Build and maintain effective working relationships with senior stakeholders across technology, cybersecurity, privacy, finance, and business functions.
• Collaborate with internal and external stakeholders to identify risks, develop practical recommendations, and support sustainable solutions.
• Use data analytics and automation tools, including SQL, Alteryx, and Power BI, to support audit testing and generate data-driven insights.
• Prepare clear, concise audit reports and presentations summarizing work performed, findings, risks, and recommendations.
• Manage multiple engagements and priorities in a fast-paced, global environment.
• Contribute to the continuous improvement of IT audit methodologies, tools, and risk assessment practices.

Benefits

• Participation in a highly competitive bonus program, with the possibility for overachievement based on performance and company results.
• Participation in the share incentive plan.
• Health insurance coverage, including medical, dental, and vision insurance.
• Wellness and family support programs.
• Life and disability insurance.
• Retirement savings plans.
• Paid leave programs.
• Education-related programs.
• Paid holidays and vacation time.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior