Senior IT Internal Auditor: Controls & Cyber Risk Lead

National-Vision,-Inc; Alpharetta (GA); On-site; USD 110,000 - 140,000; Full time

Job summary

National Vision is seeking an IT Senior Internal Auditor to independently plan and execute IT audits across retail, laboratory, corporate, and technology operations. You will assess controls, cybersecurity, data integrity, and risk management in collaboration with IT leadership and risk stakeholders.

As part of the Global Internal Audit team, you will lead engagements, communicate findings, and drive remediation efforts while staying current on regulatory requirements and industry best practices.

Qualifications

• 4-6 years in an audit capacity in either a publicly traded company and/or with a public accounting firm (Required)
• 2-4 years experience leading and executing IT audits, including ITGCs, ITACs, SOX, SOC, and ISO-related controls (Required)
• Four year college degree or equivalent experience in Information Systems, Cybersecurity, Computer Science, or a related field (Required)
• Certified Information Systems Auditor (CISA) (Preferred)
• Certified Internal Auditor (CIA) (Preferred)
• Certified Information Systems Security Professional (CISSP) (Preferred)
• Certified in Risk and Information Systems Control (CRISC) (Preferred)
• Certified Information Security Manager (CISM) (Preferred)
• Cloud security certifications (e.g., AWS, Azure, or Google Cloud) (Preferred)
• Additional certifications related to IT governance, cybersecurity, privacy, risk management, or data analytics (Preferred)
• Advance skills in Microsoft tool suite (Excel, Power Point, Word). (Required)
• Working knowledge of IT environments, including applications, databases, operating systems, cloud platforms, infrastructure, and networks (Required)
• Understanding of IT control frameworks and risk management concepts, including ITGCs, ITACs, cybersecurity, IT operations, and technology governance (Required)
• Strong verbal and written communication skills, including the ability to communicate technical concepts to non-technical audiences and strong analytical, critical-thinking, and problem-solving skills with the ability to identify risks and develop practical recommendations. (Required)
• Knowledge of cybersecurity domains, including identity and access management, vulnerability management, data protection, incident response, and third-party risk management. (Preferred)
• Experience auditing cloud environments, operational technology (OT), cybersecurity programs, or digital transformation initiatives. (Preferred)
• Experience using data analytics, reporting, automation, or visualization tools (e.g., Power BI, SQL, UiPath,Alteryx, Python). (Preferred)

Responsibilities

• Execute risk-based IT audits across applications, infrastructure, cybersecurity, SOX, and technology operations.
• Perform IT risk assessments and evaluate the design and effectiveness of key controls.
• Assess controls over user access, system development, automated controls, key reports, data integrity, and third-party risk.
• Identify control gaps, root causes, and opportunities to strengthen risk management and compliance.
• Communicate audit observations, recommendations, and project results to management.
• Lead multiple audit engagements and provide guidance and feedback to junior team members.
• Partner with business, IT, compliance, and external stakeholders throughout the audit lifecycle.
• Support control remediation efforts and monitor corrective action plan implementation.
• Drive continuous improvement through audit automation, continuous monitoring, and process enhancements.
• Maintain current knowledge of emerging technologies, cybersecurity risks, regulatory requirements, and industry best practices.
• Maintain confidentiality and uphold the highest standards of integrity and objectivity.
• Support continuous improvement initiatives within the Internal Audit function.
• Develop and maintain effective working relationships across the organization.

Skills

Excel

PowerPoint

Word

IT audits

Education

Bachelor's degree in Information Systems or related field

Tools

Power BI

SQL

UiPath

Alteryx

Python

Job description

National Vision is seeking an IT Senior Internal Auditor to independently plan and execute IT audits across retail, laboratory, corporate, and technology operations. You will assess controls, cybersecurity, data integrity, and risk management in collaboration with IT leadership and risk stakeholders.

As part of the Global Internal Audit team, you will lead engagements, communicate findings, and drive remediation efforts while staying current on regulatory requirements and industry best practices.