Cybersecurity Audit Lead — IAM & IT Controls

0801 The Coca-Cola Company

Atlanta (GA)

Presencial

USD 125 000 - 148 000

Tempo integral

Há 9 dias

Uma candidatura completa num minuto

Currículo e carta de apresentação personalizados, prontos a enviar.

Ultrapassa os filtros ATS

Resumo da oferta

The Coca-Cola Company is seeking an Information Technology Auditor with deep cybersecurity expertise to join our Internal Audit team in Atlanta. This role assesses technology controls across cloud platforms, digital ecosystems, industrial control systems, and data privacy frameworks, serving as a Cybersecurity SME to advise IT and security leadership.

Qualifications include a Bachelor's degree in Cybersecurity or related field, 3–4 years in cybersecurity or IT audit, and professional

Qualificações

Bachelor’s degree in Cybersecurity, Information Assurance, Computer Science, or related discipline.
3–4 years of experience in cybersecurity, IT audit, security engineering, or technology-focused public accounting engagements.
Professional certification such as CISA, CISSP, CISM preferred; CEH/OSCP advantageous.
Strong knowledge of IT control frameworks (COBIT, PCI DSS, NIST) and apply them in risk-based audits.
Familiarity with SAP ECC/HANA, SAP GRC, Active Directory, RedHat Linux, Windows OS, Oracle DB, MS SQL Server, AWS, Azure, Microsoft 365, Palo Alto Networks, and ICS equipment.

Responsabilidades

Serve as an internal Cybersecurity SME within Internal Audit, conducting audits and advisory work on cybersecurity, IT compliance, and technology risk.
Develop audit strategies for technology-focused engagements and align with prior audit results.
Conduct interviews with process and business owners to gather insights and controls.
Execute audits to evaluate security measures, IT controls, and governance across global environments.
Apply frameworks (NIST, PCI, COBIT) to assess posture and recommend enhancements.
Document findings, conclusions, and root-cause analysis for remediation.
Prepare audit reports with observations and corrective actions.
Collaborate with IT leaders on remediation plans and alignment with business priorities.
Stay aware of evolving technologies and emerging threats to inform scope.