Internal Audit Manager

Palo Alto Networks; Santa Clara (CA); On-site; USD 118,000 - 192,000; Full time

Job summary

Palo Alto Networks is seeking an IT Risks and Controls Audit Manager to join the Corporate Internal Audit team in Santa Clara. You will lead IT risk, data governance, and AI governance audits, delivering high‑impact assessments and advisory services in a fast‑paced tech environment.

The role requires strong project management and communication skills, with collaboration across Privacy, IT, Infosec, and Business Resilience teams, and experience with AI risk considerations.

Qualifications

• Minimum 8 years of IT Risk and Controls audit experience in a public company or big firm.
• Proven audit experience in information security, privacy, business continuity, IT governance.

Responsibilities

• Plan, conduct, and report IT risk and controls audits and advisory engagements.
• Lead AI governance and technology audits across the AI lifecycle, including security and ethics.
• Develop methodologies for AI-driven audits and integrate AI risk management across audit domains.
• Mentor auditors and collaborate with cross-functional teams to implement corrective actions.

Skills

IT Risk & Controls

IT Governance

AI governance

Data analytics

External audit

Education

Bachelor's in IT or Cybersecurity

Tools

SFDC

SAP

Audit software

G-Suite

Job description

At Palo Alto Networks®, we’re united by a shared mission—to protect our digital way of life. We thrive at the intersection of innovation and impact, solving real-world problems with cutting‑edge technology and bold thinking. Here, everyone has a voice, and every idea counts. If you’re ready to do the most meaningful work of your career alongside people who are just as passionate as you are, you’re in the right place.

Who We Are

In order to be the cybersecurity partner of choice, we must trailblaze the path and shape the future of our industry. This is something our employees work at each day and is defined by our values: Disruption, Collaboration, Execution, Integrity, and Inclusion. We weave AI into the fabric of everything we do and use it to augment the impact every individual can have. If you are passionate about solving real‑world problems and ideating beside the best and the brightest, we invite you to join us!

We believe collaboration thrives in person. That’s why most of our teams work from the office full time, with flexibility when it’s needed. This model supports real‑time problem‑solving, stronger relationships, and the kind of precision that drives great outcomes.

Job Summary

Palo Alto Networks is looking for a highly motivated and experienced IT Risks and Controls Audit Manager to join our Corporate Internal Audit team.

The role will focus on IT Risks, Processes, Controls, and Enterprise AI Governance. As part of a collaborative team, you will be responsible for conducting and delivering IT Systems, Governance, and Processes Audits and Transformation advisory engagements in alignment with the fast‑paced, dynamic environment of Palo Alto Networks (PANW). Your role will involve developing and implementing agentic AI solutions to review Information Technology management processes and governance, as well as effectively communicating IT risks to internal stakeholders. Additionally, you will play a key role in managing risks related to IT Systems, Processes, and Controls and supporting the company’s rapid system transformation by introducing leading practices and new processes.

The ideal candidate must be a proven leader, an exemplary project manager, proactive, confident in interacting with management and external stakeholders at all levels, bring business experience, passion, and have experience in using analytical tools including AI, assessing strategic, financial, regulatory and technology risks, preferably in a technology industry.

The candidate must demonstrate the ability to adhere to our corporate core values of Disruption, Execution, Collaboration, Integrity and Inclusion.

Your Impact

• Plan, conduct, and report audit and advisory engagements related to IT Risks and Controls, IT and data Governance and processes, and IT Transformation processes to identify vulnerabilities and areas of concern.
• Lead comprehensive AI governance and technology audits, evaluating risks across the AI lifecycle (accuracy, bias, drift, explainability) and assessing the security posture of AI systems, including prompt engineering and runtime security.
• Develop and implement advanced audit methodologies for AI‑driven products and services, ensuring compliance with emerging AI regulations and ethical guidelines.
• Drive the integration of AI risk management into existing technology audit domains, providing expert advisory on control design and contributing to AI capabilities.
• Deploying data analytics, automated scripts, and agentic AI tools to pivot from sample‑based checks to continuous, predictive risk insights.
• Collaborate with cross‑functional teams, including Privacy, Business Resilience, IT, and Infosec, to identify and address audit findings through corrective actions, ensuring compliance with regulatory requirements within specified timelines.
• Lead research on current IT Risk and Controls issues and trends to formulate recommendations, and provide practical advice for corrective action, innovation, and continuous process improvements.
• Analyze audit data to identify trends, patterns, and potential issues. Ensure IT systems align with the company’s prescribed system development lifecycle.
• Lead the evaluation of new processes, policies, and systems to enhance organizational efficiency, effectiveness, and risk mitigation activities.
• Develop productive business partner relationships and engage with key management personnel to gather information and propose business process improvements.
• Stay updated on industry best practices and regulations related to IT system audits. Lead and mentor a team of auditors, providing guidance, training, and support.

Qualifications

• Minimum of 8 years of IT Risk and Controls audit experience in a publicly traded company and/or public accounting firms. Previous experience in a technology company and/or Big 4 firms is preferred.
• Proven audit experience in Information Security, Privacy, Business Continuity Planning, System transformation and IT Governance including roles in external and/or internal audit with strong understanding of internal controls, IT processes, and technology risk principles.
• Strong understanding of the system development lifecycle. Proficiency Information Technology Application Controls (ITAC) and Information Technology General Controls (ITGC) as well as enterprise systems such as SFDC, SAP, or equivalent.
• Bachelor’s degree in Information Technology, Cybersecurity or related field from an accredited institution.
• Certified Information Systems Auditor (CISA) certification is mandatory, Certified in Governance of Enterprise IT (CGEIT) is preferred. CA, CPA, CIA or equivalent certifications will be a plus.
• Sound knowledge of relevant regulations and industry standards (e.g., COBIT, ISO/IEC 27001, ISO/IEC 27701, ISO/IEC 42001, ISO 22301, NIST, ITIL, COSO and IT Governance Frameworks).
• Excellent communication and interpersonal skills, ability to interpret complex data and identify areas of improvement, along with ability to work independently and in a team environment.
• Strong analytical, problem‑solving skills with attention to detail and strong project management skills to prioritize and manage multiple audits concurrently. Proficiency in using audit software, data analysis tools, and G‑Suite applications.
• Experience in operational audit will be a plus.
• Must be able to work in our Santa Clara, California office at least 3 days a week.

Additional Information

The Team

The Internal Audit team is responsible for managing and executing the company’s internal audit program and ensuring we are best in class.

You will be part of a dynamic, disruptive and fast paced team of highly specialized professionals with varied skill sets spread out between the US and India.

Compensation Disclosure

The compensation offered for this position will depend on qualifications, experience, and work location. For candidates who receive an offer at the posted level, the starting base salary (for non-sales roles) or base salary + commission target (for sales/com‑missioned roles) is expected to be the annual range listed below. The offered compensation may also include restricted stock units and a bonus. A description of our employee benefits may be found here.

$118,000.00 - $191,500.00/yr

Our Commitment

We’re trailblazers that dream big, take risks, and challenge cybersecurity’s status quo. It’s simple: we can’t accomplish our mission without diverse teams innovating, together.

We are committed to providing reasonable accommodations for all qualified individuals with a disability. If you require assistance or accommodation due to a disability or special need, please contact us at [e-mail].

Palo Alto Networks is an equal opportunity employer. We celebrate diversity in our workplace, and all qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or other legally protected characteristics.

All your information will be kept confidential according to EEO guidelines.

Is role eligible for Immigration Sponsorship? No. Please note that we will not sponsor applicants for work visas for this position.