Senior Manager, IT Audit

The Estée Lauder Companies Inc.; New York (NY); In loco; USD 123.000 - 190.000; Tempo pieno

Vantaggi offerti da questo lavoro

Health insurance

Retirement savings plans

Paid leave programs

Education-related programs

Paid holidays and vacation

Descrizione del lavoro

The Estée Lauder Companies Inc. is seeking a Senior Manager, IT Internal Audit to lead global technology risk assessments, audit planning, and complex IT audit engagements across the company-wide brands, regions, and corporate functions.

You will evaluate technology, cybersecurity, cloud, applications, infrastructure, and data risks; provide practical advisory insights to senior stakeholders; oversee remediation follow-up; and contribute to a risk-based global internal audit plan while using

Competenze

• 8+ years in IT internal audit, IT risk management, cybersecurity or related fields.
• Bachelor’s degree in computer science, information systems, engineering, data science, or related field.
• Proven experience leading complex projects and cross-functional collaboration.

Mansioni

• Lead global IT and cybersecurity risk assessments and contribute to annual audit planning.
• Plan and oversee IT audit engagements from scoping to reporting and remediation validation.
• Assess technology risks across cybersecurity, cloud, data, and business applications.
• Evaluate controls across environments including major cloud platforms and enterprise systems.
• Build relationships with senior stakeholders across technology, privacy, finance, and business units.

Conoscenze

IT audit

Cybersecurity

Cloud risk

Data analytics

Stakeholder mgmt

COSO/COBIT

Formazione

CS/IS/Eng degree

Strumenti

SQL

Power BI

Alteryx

Descrizione del lavoro

The Estée Lauder Companies Inc. is one of the world’s leading manufacturers, marketers, and sellers of quality skin care, makeup, fragrance, and hair care products, and is a steward of luxury and prestige brands globally. The company’s products are sold in approximately 150 countries and territories under brand names including: Estée Lauder, Aramis, Clinique, Lab Series, Origins, M·A·C, La Mer, Bobbi Brown Cosmetics, Aveda, Jo Malone London, Bumble and bumble, Darphin Paris, TOM FORD, Smashbox, AERIN Beauty, Le Labo, Editions de Parfums Frédéric Malle, GLAMGLOW, KILIAN PARIS, Too Faced, Dr.Jart+, the DECIEM family of brands, including The Ordinary and NIOD, and BALMAIN Beauty.

Description

The Senior Manager, IT Internal Audit will lead global technology risk assessments, audit planning, and complex IT audit engagements across The Estée Lauder Companies’ brands, regions, and corporate functions.

This role will evaluate technology, cybersecurity, cloud, application, infrastructure, and data-related risks; provide practical advisory insights to senior stakeholders; oversee remediation follow-up; and contribute to the development of a risk-based global internal audit plan.

Key Responsibilities

• Lead global IT and cybersecurity risk assessments and contribute to the risk-based annual internal audit plan.
• Plan and oversee complex IT audit and advisory engagements from scoping through reporting and remediation validation.
• Assess technology risks across cybersecurity, retail, e-commerce, finance, manufacturing, supply chain, cloud, infrastructure, and business applications.
• Evaluate controls across environments including Microsoft Azure, Amazon Web Services, Google Cloud, Windows, UNIX/Linux, Oracle, SAP, Hyperion, and internally developed applications.
• Oversee the audit follow-up process, including remediation tracking, validation, escalation, and reporting.
• Build and maintain effective working relationships with senior stakeholders across technology, cybersecurity, privacy, finance, and business functions.
• Collaborate with internal and external stakeholders to identify risks, develop practical recommendations, and support sustainable solutions.
• Use data analytics and automation tools—including SQL, Alteryx, and Power BI—to support audit testing and generate data-driven insights.
• Prepare clear, concise audit reports and presentations summarizing work performed, findings, risks, and recommendations.
• Manage multiple engagements and priorities in a fast-paced, global environment.
• Contribute to the continuous improvement of IT audit methodologies, tools, and risk assessment practices.

Qualifications

Required Qualifications

• 8 or more years of experience in IT internal audit, IT risk management, IT compliance, cybersecurity, or IT assurance and advisory services.
• Bachelor’s degree in computer science, information systems, engineering, data science, or a related field.
• Proven experience leading complex projects and working independently and collaboratively in cross-functional teams.
• Strong knowledge of technology, cybersecurity, cloud, application, infrastructure, and/or privacy risks.
• Familiarity with relevant frameworks and standards, such as COSO, COBIT, ISO 27001, NIST, and ITIL.
• Demonstrated project management and organizational skills, with the ability to manage multiple priorities.
• Excellent written, verbal, presentation, and relationship-management skills.

Preferred Qualifications

• CISA, CISM, CISSP, CIA, CPA, or another relevant certification, completed or in progress.
• Experience with SQL, Alteryx, Power BI, or other audit analytics tools.
• Experience in consumer products, retail, manufacturing, or supply chain industries.
• Knowledge of application security, network security, cloud security, and secure software development practices.
• Experience working in a global or multinational organization.

Pay Range:

The anticipated base salary range for this position is $122,900.00 to $190,000.00. Exact salary depends on several factors such as experience, skills, education, and budget. Salary range may vary based on geographic location. In addition to base salary, this position is eligible for participation in a highly competitive bonus program as well as participation in the share incentive plan. In addition,

In addition to base salary, this position is eligible for participation in a highly competitive bonus program with the possibility for overachievement based on performance and company results.

Benefits

• health insurance coverage (medical, dental, and vision insurance)
• wellness and family support programs
• life and disability insurance
• retirement savings plans
• paid leave programs
• education-related programs
• paid holidays and vacation time

Many of these benefits are subsidized or fully paid for by the company.

Equal Opportunity Employer

It is Company's policy not to discriminate against any employee or applicant for employment on the basis of race, color, creed, religion, national origin, ancestry, citizenship status, age, sex or gender (including pregnancy, childbirth and related medical conditions), gender identity or gender expression (including transgender status), sexual orientation, marital status, military service and veteran status, physical or mental disability, protected medical condition as defined by applicable state or local law, genetic information, or any other characteristic protected by applicable federal, state, or local laws and ordinances. The Company will endeavor to provide a reasonable accommodation consistent with the law to otherwise qualified employees and prospective employees with a disability and to employees and prospective employees with needs related to their religious observance or practices. Should you wish to apply for this position or any other position with the Company and you believe you require assistance to complete an application or participate in an interview, please contact [e-mail].

Michigan Applicants:

Persons with disabilities needing accommodations for employment must notify the company in writing of the need for an accommodation within 182 days after the date the person with a disability knew or reasonably should have known that an accommodation was needed.

Philadelphia Applicants:

Philadelphia's Fair Chance Hiring Law

Rhode Island Applicants:

The company is subject to chapters 29-38 of title 28 of the general laws of Rhode Island and is therefore covered by the state's workers' compensation law.