Job Title:
Lead, Internal Audit - IT Operations & Cybersecurity
Job Description:
Job Summary
The Lead, IT Operations & Cybersecurity Audit is a strategic leader within the Internal Audit function responsible for advancing the organization's technology risk assurance capabilities. This role provides subject matter expertise and leadership across IT operations, cybersecurity, cloud technologies, infrastructure, identity and access management, SAP technology risks, and digital transformation initiatives.
As a senior member of the Internal Audit team, this individual will lead complex technology-focused audits, influence enterprise risk management strategies, and partner with senior leaders across Information Technology, Cybersecurity, Compliance, Finance, and Operations. The role will help establish and mature a scalable technology assurance program capable of addressing Entegris' evolving digital risk landscape.
Key Responsibilities
Technology Risk Assurance Leadership
- Lead the development and execution of the Internal Audit technology assurance strategy, ensuring alignment with enterprise priorities and emerging risk areas.
- Serve as the primary Internal Audit subject matter expert for technology operations, cybersecurity, infrastructure, cloud environments, identity and access management, and technology governance.
- Provide strategic recommendations to Internal Audit leadership regarding technology risk trends, emerging threats, and assurance priorities.
- Support the continuous enhancement of audit methodologies to address evolving technology and cybersecurity risks.
IT and Cybersecurity Audits
- Lead complex audits and advisory engagements covering IT general controls (ITGCs), cybersecurity, cloud platforms, infrastructure environments, network security, privileged access management, and technology operations.
- Evaluate the effectiveness of governance, risk management, and control frameworks supporting enterprise technology functions.
- Assess cybersecurity programs, incident response capabilities, vulnerability management processes, and third-party technology risks.
- Perform technology-focused investigations and special reviews as needed.
SAP and Digital Transformation Risk Management
- Lead risk assessments and assurance activities related to SAP S/4HANA, enterprise applications, automation initiatives, and digital transformation programs.
- Evaluate technology risks associated with system implementations, migrations, upgrades, and cloud adoption initiatives.
- Assess automated controls and technology-enabled business processes for operational effectiveness and risk mitigation.
- Provide assurance over business-critical technology platforms and supporting control environments.
SOX and Compliance Support
- Partner with management and external auditors to support SOX compliance activities related to IT general controls and automated controls.
- Evaluate control design and operating effectiveness across key technology processes supporting financial reporting.
- Contribute technology expertise to enterprise compliance and regulatory initiatives.
- Assist in identifying opportunities to improve control efficiency while maintaining regulatory compliance.
Continuous Assurance and Analytics
- Lead development of technology risk dashboards, monitoring tools, and continuous assurance capabilities.
- Partner with Internal Audit analytics resources to identify opportunities for automation and continuous monitoring.
- Leverage data-driven insights to improve audit coverage, enhance risk detection, and increase assurance effectiveness.
- Promote innovative approaches to technology risk management and audit execution.
Stakeholder Engagement and Collaboration
- Build strong partnerships with leaders across Information Technology, Cybersecurity, Compliance, Finance, Operations, and other business functions.
- Coordinate technology assurance activities with external auditors and third-party assessors.
- Influence stakeholders to strengthen risk management practices and address control gaps.
- Serve as a trusted advisor to leadership on technology and cybersecurity risk matters.
Qualifications
Required Qualifications
- Bachelor's degree in Information Systems, Computer Science, Cybersecurity, Engineering, Accounting, Finance, or a related discipline.
- 8+ years of experience in Internal Audit, IT Audit, Cybersecurity, Technology Risk Management, Information Security, or a related field.
- Demonstrated experience leading complex technology audit engagements across multiple risk domains.
- Strong knowledge of IT general controls, cybersecurity frameworks, cloud technologies, infrastructure operations, identity and access management, and technology governance.
- Experience assessing enterprise applications, ERP systems, and automated controls.
- Exceptional communication, influencing, and stakeholder management skills.
Preferred Qualifications
- Experience supporting SAP S/4HANA environments and related technology controls.
- Experience assessing cloud platforms such as Microsoft Azure, AWS, or Google Cloud.
- Knowledge of NIST, ISO 27001, COBIT, CIS Controls, and other recognized cybersecurity and governance frameworks.
- Experience supporting public company SOX compliance programs.
- Professional certifications such as CISA, CISSP, CRISC, CISM, CIA, CPA, or equivalent.
- Experience operating in a global, geographically dispersed organization.
Leadership Expectations
- Serves as a recognized expert in technology risk, cybersecurity, and technology assurance.
- Leads enterprise-wide initiatives and influences strategy beyond immediate functional responsibilities.
- Exercises significant independent judgment in addressing highly complex business and technology challenges.
- Builds credibility with senior leaders and acts as a trusted advisor on technology risk matters.
- Drives innovation, capability development, and continuous improvement across the Internal Audit function.
- Mentors and develops less experienced team members while elevating overall technical expertise within the organization.
Success Measures
This role will be successful by:
- Strengthening Internal Audit's technology and cybersecurity assurance capabilities.
- Providing meaningful risk insights related to cloud, cybersecurity, infrastructure, SAP, and digital transformation initiatives.
- Improving technology risk visibility through continuous assurance and monitoring capabilities.
- Supporting effective SOX compliance and technology control governance.
- Building strong partnerships across global technology and business organizations.
- Establishing sustainable, scalable technology assurance processes aligned with Entegris' long-term digital transformation strategy.
Location
Pune, India
Pune offers access to a highly skilled talent market with deep expertise in technology risk, cybersecurity, SAP, cloud technologies, and technology consulting. The location enables efficient global support across Asia, Europe, and North America while helping establish a scalable center of excellence for technology assurance and cybersecurity risk oversight.
