Senior IT Internal Auditor: Controls, SOX & Cybersecurity

National Vision Inc.; Alpharetta (GA); On-site; USD 90,000 - 130,000; Full time

Benefits offered by this job

Health insurance

Dental insurance

401k with company match

Paid time off

Paid holidays

Parental leave

Employee eyewear discount

Job summary

National Vision seeks an IT Senior Internal Auditor to plan and execute IT audits across retail, labs, and corporate operations. You will evaluate technology controls, regulatory compliance, and risk management with the Global Internal Audit team.

Partner with business and IT leaders to assess SOX, SOC, ISO controls, data integrity, cybersecurity, and third‑party risk, delivering practical recommendations and supporting remediation efforts.

Qualifications

• Four year college degree in Information Systems, Cybersecurity, Computer Science, or related field.
• 4–6 years of audit experience, preferably in a public company or public accounting.
• 2–4 years leading IT audits including ITGCs, ITACs, SOX, SOC, and ISO controls.

Responsibilities

• Plan and execute IT audits to evaluate technology controls, risk management, and regulatory compliance.
• Assess user access, SDLC, automated controls, data integrity, and third-party risk.
• Communicate findings and recommendations to management; support remediation.
• Lead engagements and mentor junior staff across audit lifecycle.

Skills

Excel

PowerPoint

Word

IT environments

IT control frameworks

Risk assessment

Communication

Cybersecurity

Data analytics

SOX compliance

Education

Bachelor's degree in Information Systems, Cybersecurity, Computer Science, or related field

Tools

Power BI

SQL

UiPath

Alteryx

Python

Job description

National Vision seeks an IT Senior Internal Auditor to plan and execute IT audits across retail, labs, and corporate operations. You will evaluate technology controls, regulatory compliance, and risk management with the Global Internal Audit team.

Partner with business and IT leaders to assess SOX, SOC, ISO controls, data integrity, cybersecurity, and third‑party risk, delivering practical recommendations and supporting remediation efforts.