Senior Manager, IT Audit

Estée Lauder Companies; New York (NY); On-site; USD 123,000 - 190,000; Full time

Benefits offered by this job

Health insurance

Wellness programs

Retirement plans

Paid leave

Education programs

Holidays and vacation

Job summary

The Estée Lauder Companies Inc. in New York seeks an experienced IT internal audit professional to lead risk assessments across cybersecurity, cloud, retail, and finance systems.

You will plan, scope engagements from scoping through reporting and remediation validation, and report findings to senior stakeholders. You will leverage SQL, Alteryx, and Power BI to support testing, data-driven insights, and remediation tracking.

Qualifications

• Bachelor’s degree in computer science, information systems, engineering, data science, or a related field.

Responsibilities

• Lead global IT and cybersecurity risk assessments and contribute to the risk-based annual internal audit plan.
• Plan and oversee complex IT audit engagements from scoping through reporting and remediation validation.
• Assess technology risks across cybersecurity, retail, e-commerce, finance, manufacturing, supply chain, cloud, and business applications.
• Evaluate controls across environments including Azure, AWS, Google Cloud, Windows, UNIX/Linux, Oracle, SAP, Hyperion, and in-house apps.
• Oversee the audit follow-up process, including remediation tracking, validation, escalation, and reporting.
• Build relationships with senior stakeholders across technology, cybersecurity, privacy, finance, and business functions.
• Use data analytics and automation tools to support audit testing and generate insights.
• Prepare clear audit reports and presentations summarizing findings, risks, and recommendations.

Job description

The Estée Lauder Companies Inc. is one of the world’s leading manufacturers, marketers, and sellers of quality skin care, makeup, fragrance, and hair care products, and is a steward of luxury and prestige brands globally. The company’s products are sold in approximately 150 countries and territories under brand names including: Estée Lauder, Aramis, Clinique, Lab Series, Origins, M·A·C, La Mer, Bobbi Brown Cosmetics, Aveda, Jo Malone London, Bumble and bumble, Darphin Paris, TOM FORD, Smashbox, AERIN Beauty, Le Labo, Editions de Parfums Frédéric Malle, GLAMGLOW, KILIAN PARIS, Too Faced, Dr.Jart+, the DECIEM family of brands, including The Ordinary and NIOD, and BALMAIN Beauty.

Description

• Lead global IT and cybersecurity risk assessments and contribute to the risk-based annual internal audit plan.
• Plan and oversee complex IT audit and advisory engagements from scoping through reporting and remediation validation.
• Assess technology risks across cybersecurity, retail, e-commerce, finance, manufacturing, supply chain, cloud, infrastructure, and business applications.
• Evaluate controls across environments including Microsoft Azure, Amazon Web Services, Google Cloud, Windows, UNIX/Linux, Oracle, SAP, Hyperion, and internally developed applications.
• Oversee the audit follow-up process, including remediation tracking, validation, escalation, and reporting.
• Build and maintain effective working relationships with senior stakeholders across technology, cybersecurity, privacy, finance, and business functions.
• Collaborate with internal and external stakeholders to identify risks, develop practical recommendations, and support sustainable solutions.
• Use data analytics and automation tools—including SQL, Alteryx, and Power BI—to support audit testing and generate data-driven insights.
• Prepare clear, concise audit reports and presentations summarizing work performed, findings, risks, and recommendations.
• Manage multiple engagements and priorities in a fast-paced, global environment.
• Contribute to the continuous improvement of IT audit methodologies, tools, and risk assessment practices.

Qualifications

Required Qualifications

• 8 or more years of experience in IT internal audit, IT risk management, IT compliance, cybersecurity, or IT assurance and advisory services.
• Bachelor’s degree in computer science, information systems, engineering, data science, or a related field.
• Proven experience leading complex projects and working independently and collaboratively in cross-functional teams.
• Strong knowledge of technology, cybersecurity, cloud, application, infrastructure, and/or privacy risks.
• Familiarity with relevant frameworks and standards, such as COSO, COBIT, ISO 27001, NIST, and ITIL.
• Demonstrated project management and organizational skills, with the ability to manage multiple priorities.
• Excellent written, verbal, presentation, and relationship-management skills.

Preferred Qualifications

• CISA, CISM, CISSP, CIA, CPA, or another relevant certification, completed or in progress.
• Experience with SQL, Alteryx, Power BI, or other audit analytics tools.
• Experience in consumer products, retail, manufacturing, or supply chain industries.
• Knowledge of application security, network security, cloud security, and secure software development practices.
• Experience working in a global or multinational organization.

Pay Range:

The anticipated base salary range for this position is $122,900.00 to $190,000.00. Exact salary depends on several factors such as experience, skills, education, and budget. Salary range may vary based on geographic location. In addition to base salary, this position is eligible for participation in a highly competitive bonus program as well as participation in the share incentive plan. In addition, In addition to base salary, this position is eligible for participation in a highly competitive bonus program with the possibility for overachievement based on performance and company results. In addition, The Estée Lauder Companies offers a variety of benefits to eligible employees, including health insurance coverage (medical, dental, and vision insurance), wellness and family support programs, life and disability insurance, retirement savings plans, paid leave programs, education-related programs, paid holidays and vacation time, and many others. Many of these benefits are subsidized or fully paid for by the company.

Equal Opportunity Employer

It is Company's policy not to discriminate against any employee or applicant for employment on the basis of race, color, creed, religion, national origin, ancestry, citizenship status, age, sex or gender (including pregnancy, childbirth and related medical conditions), gender identity or gender expression (including transgender status), sexual orientation, marital status, military service and veteran status, physical or mental disability, protected medical condition as defined by applicable state or local law, genetic information, or any other characteristic protected by applicable federal, state, or local laws and ordinances. The Company will endeavor to provide a reasonable accommodation consistent with the law to otherwise qualified employees and prospective employees with a disability and to employees and prospective employees with needs related to their religious observance or practices. Should you wish to apply for this position or any other position with the Company and you believe you require assistance to complete an application or participate in an interview, please contact [e-mail].

Michigan Applicants: Persons with disabilities needing accommodations for employment must notify the company in writing of the need for an accommodation within 182 days after the date the person with a disability knew or reasonably should have known that an accommodation was needed.

Philadelphia Applicants: Philadelphia's Fair Chance Hiring Law

Rhode Island Applicants: The company is subject to chapters 29-38 of title 28 of the general laws of Rhode Island and is therefore covered by the state's workers' compensation law.