Cybersecurity Auditor – Identity & Access Management

Coca-Cola Co; Atlanta (GA); On-site; USD 125,000 - 148,000; Full time

Job summary

The Coca-Cola Company in Atlanta, Georgia is seeking an Information Technology Auditor with deep cybersecurity expertise to join our Internal Audit team. This role will act as a Cybersecurity SME, assessing technology controls across cloud platforms, digital ecosystems, industrial control systems, and data privacy frameworks to safeguard enterprise resilience.

You will develop audit strategies, perform interviews, execute tests, apply frameworks like NIST and COBIT, and collaborate with IT

Qualifications

• Bachelor’s degree in Cybersecurity, Information Assurance, Computer Science, or related discipline.
• 3–4 years of experience in cybersecurity, IT audit, security engineering, or technology-focused public accounting engagements.
• Professional certification such as CISA, CISSP, CISM preferred; additional technical credentials (e.g., CEH, OSCP) advantageous.

Responsibilities

• Serve as an internal Cybersecurity SME within the Internal Audit function, conducting audits and advisory activities related to cybersecurity, IT compliance, and technology risk.
• Develop audit strategies for technology-focused engagements by contributing methodologies, risk-based approaches, and alignment with prior audit results.
• Perform interviews with process and business owners to gather insights on operational practices, expected controls, and areas of potential vulnerability.
• Independently execute established audit tests to evaluate effectiveness of security measures, IT controls, and governance processes across global environments.
• Apply frameworks such as NIST, PCI, COBIT, and others to assess cybersecurity posture and recommend control enhancements.
• Analyze findings using professional skepticism and risk-awareness; document judgment-based conclusions and ensure recommendations address root causes effectively.
• Prepare detailed audit reports communicating observations, risk implications, and corrective actions in an accurate and concise format.
• Collaborate with IT leaders and stakeholders on remediation plans for identified gaps, ensuring alignment with business priorities and compliance standards.
• Maintain awareness of evolving technologies—cloud services, ERP platforms, industrial control systems—and emerging cybersecurity threats to inform audit scope and focus.
• Participate in continuous improvement of audit methodologies and contribute ideas for leveraging analytics and automation within audit processes.

Skills

Cybersecurity expertise

IT audit

Risk assessment

Communication skills

Education

Bachelor’s degree in Cybersecurity, Information Assurance, Computer Science, or related discipline

Tools

SAP ECC/HANA

SAP GRC

Active Directory

RedHat Linux

Windows OS

Oracle Database

MS SQL Server

AWS

Azure Cloud

Microsoft 365

Palo Alto Networks

Network/ICS equipment

Job description

**Job Description Summary:**At The Coca-Cola Company, we are connecting the power of technology with the scale of our global operations to create secure, digitally confident systems that drive growth. Cybersecurity is at the heart of this commitment, ensuring our platforms, data, and operational environments remain protected as we transform in an increasingly complex and connected world.We are seeking an Information Technology Auditor with deep cybersecurity expertise to join our Internal Audit team. This role is integral to safeguarding enterprise resilience by assessing technology controls across cloud platforms, digital ecosystems, industrial control systems, and data privacy frameworks. You will serve as a Cybersecurity Subject Matter Expert (SME), partnering closely with senior IT and security leaders to identify emerging risks, evaluate control strategies, and ensure compliance with globally recognized standards, including SOX requirements.If you have strong technical curiosity, proven experience in IT audit or cybersecurity, and a passion for applying risk-based thinking to dynamic technology environments, this opportunity offers a unique platform to influence operational integrity across a company that refreshes the world every day.**What You’ll Do for Us*** Serve as an internal Cybersecurity SME within the Internal Audit function, conducting audits and advisory activities related to cybersecurity, IT compliance, and technology risk.* Develop audit strategies for technology-focused engagements by contributing methodologies, risk-based approaches, and alignment with prior audit results.* Perform interviews with process and business owners to gather insights on operational practices, expected controls, and areas of potential vulnerability.* Independently execute established audit tests to evaluate effectiveness of security measures, IT controls, and governance processes across global environments.* Apply frameworks such as NIST, PCI, COBIT, and others to assess cybersecurity posture and recommend control enhancements.* Analyze findings using professional skepticism and risk-awareness; document judgment-based conclusions and ensure recommendations address root causes effectively.* Prepare detailed audit reports communicating observations, risk implications, and corrective actions in an accurate and concise format.* Collaborate with IT leaders and stakeholders on remediation plans for identified gaps, ensuring alignment with business priorities and compliance standards.* Maintain awareness of evolving technologies—cloud services, ERP platforms, industrial control systems—and emerging cybersecurity threats to inform audit scope and focus.* Participate in continuous improvement of audit methodologies and contribute ideas for leveraging analytics and automation within audit processes.**Requirements & Qualifications*** Bachelor’s degree in Cybersecurity, Information Assurance, Computer Science, or related discipline.* 3–4 years of experience in cybersecurity, IT audit, security engineering, or technology-focused public accounting engagements.* Professional certification such as CISA, CISSP, CISM preferred; additional technical credentials (e.g., CEH, OSCP) advantageous.* Strong knowledge of IT control frameworks (COBIT, PCI DSS, NIST) and ability to apply them in risk-based auditing environments.* Familiarity with technologies such as SAP ECC/HANA, SAP GRC, Active Directory, RedHat Linux, Windows OS, Oracle Database, MS SQL Server, AWS, Azure Cloud, Microsoft 365, Palo Alto Networks, and network/ICS equipment.* Understanding of general IT control principles including security operations, system administration, program governance, change management, and privacy standards.* Proficiency across modern development models (DevOps, Agile) and awareness of data governance and incident management processes.* Strong analytical and quantitative ability; comfortable working with probabilities, ratios, and statistical measures to identify risk trends.* Excellent communication and interpersonal skills with the ability to clearly present risks, negotiate corrective actions, and engage stakeholders at all levels.* Ability to travel up to 30% domestically and internationally; flexibility to accommodate department needs and extended projects.* Demonstrated initiative and aptitude for learning new technologies and adapting to evolving business environments with minimal supervision.**Position Details:****Location: Atlanta, Georgia**Travel 30% domestic and internationalIndividual contributor role - no direct reports**What We Can Do for You:*** **Commitment to Diversity:** We are paving the way to create change in the industry and our leadership is committed to diversity, inclusion and belonging.* **Global Network**: Expand your global network by developing, learning, and growing with our top talent and connections around the world.* **Agile Work Environment**: We embrace agile, with leadership that believes in removing barriers, so you are empowered to innovate and discover new solutions to complex problems.The Coca-Cola Company will not offer sponsorship for employment status (including, but not limited to, H1-B visa status and other employment-based nonimmigrant visas) for this position. Accordingly, all applicants must be currently authorized to work in the United States on a full-time basis and must not require The Coca-Cola Company's sponsorship to continue to work legally in the United States.**Skills:**Artificial Intelligence (AI), Artificial Intelligence Technologies, Cloud Security, Cyber Risks, Cybersecurity, Cybersecurity Assessment, Cyber Threat Prevention, Information Systems, Information Technology Auditing, Infrastructure Administration, Internal Controls, Kali Linux, Microsoft Dynamics 365 ERP, Network Security, SAP Systems, Sarbanes-Oxley Act (SOX)**Pay Range:**United States: 124,600 - 148,200 USD*Base pay offered may vary depending on geography, job-related knowledge, skills, and experience. A full range of medical, financial, and/or other benefits, dependent on the position, is offered.***Location(s):**United States of America**City/Cities:**Atlanta**Travel Required:**26% - 50%**Relocation Provided:**No**Job Posting End Date:**November 3, 2026**Our Purpose and Growth Culture:**We are taking deliberate action to nurture an inclusive culture that is grounded in our company purpose, to refresh the world and make a difference. We act with a growth mindset, take an expansive approach to what’s possible and believe in continuous learning to improve our business and ourselves. We focus on four key behaviors – curious, empowered, inclusive and agile – and value how we work as much as what we achieve. We believe that our culture is one of the reasons our company continues to thrive after 130+ years. Visit Our Purpose and Vision to learn more about these behaviors and how you can bring them to life in your next role at Coca-Cola.We are an Equal Opportunity Employer and do not discriminate against any employee or applicant for employment because of race, color, sex, age, national origin, religion, sexual orientation, gender identity and/or expression, status as a veteran, and basis of disability or any other federal, state or local protected class. When we collect your personal information as part of a job application or offer of employment, we do so in accordance with industry standards and best practices and in compliance with applicable privacy laws.