AVP, Global Security and Infra - Audit Team at MetLife in Cary

Job description

Location Cary, North Carolina The Team You Will Join As part of Internal Audit at MetLife, you’ll play a critical role protecting MetLife and its stakeholders by delivering both independent, risk-based, and objective assurance through audit execution and providing advice and insights through strategic advisory engagements. Collaborating across the company, you’ll use your strategic problem-solving skills, consulting expertise, and ethical standards to support the company’s growth strategy. Join us at the forefront of the evolving risk landscape to proactively address business imperatives and mitigate emerging risks by developing talent, leveraging new technology, and fostering an innovative culture. The Opportunity This position leads Internal Audit’s assurance and advisory coverage for the Global Security (CISO) and Global Infrastructure (CTO) organizations. Scope includes cybersecurity strategy and operations, identity and access management, threat detection and response, third-party cybersecurity risk, cloud and hybrid infrastructure, network and platform engineering, and core IT operations. Leading a team of technology and cybersecurity auditors, you will set the risk-based coverage strategy and serve as a trusted advisor to senior technology leaders. You will also shape Internal Audit’s response to rapidly evolving AI-enabled threats and controls—assessing whether emerging risks are anticipated and mitigated and whether AI-enabled security and infrastructure capabilities are governed, resilient, and well controlled. Success will be measured by both the assurance delivered and the practical insight provided to management. Key Responsibilities Own the risk assessment, audit plan, execution, issue management, and reporting for Global Security and Global Infrastructure, coordinating coverage with regional and functional audit leaders and teams. Lead assurance and advisory engagements on emerging cyber, cloud, infrastructure, and AI risks, translating technical exposure into business impact and practical improvements. Set the global audit roadmap, methodology, and testing approach for cybersecurity and infrastructure; expand the use of analytics, continuous auditing, automation, and AI-enabled tools. Build trusted relationships with the CISO, CTO, their leadership teams, and first- and second-line risk partners through early, transparent engagement. Communicate risks, results, and thematic insights clearly to senior technology leaders, Internal Audit leadership, the Audit Committee, and relevant risk committees. Lead and develop a team of audit professionals, strengthening technical depth, performance, collaboration, and career growth. Deliver timely, high-quality work across the engagement life cycle, including remediation validation, methodology compliance, and balanced-scorecard management. Model MetLife’s success principles and the highest standards of integrity, objectivity, ethics, and professional skepticism. Required Qualifications 12+ years of IT audit, cybersecurity, technology risk, and/or public accounting or consulting experience, including proven leadership of technology Internal Audit teams. Deep, current knowledge of cybersecurity and infrastructure domains, including threat detection and response, identity and access management, vulnerability and third-party risk, cloud and hybrid platforms, networking, resilience, and IT operations, including experience assessing against leading standards such as NIST CSF/800-53, ISO 27001, CIS, COBIT, ITIL, and SOX. Demonstrated use of data analytics, automation, and continuous auditing to strengthen coverage and insight. Working knowledge of AI and agentic AI risks, security use cases, and the governance and controls needed for safe deployment. Executive presence and the ability to communicate succinctly, influence senior leaders, and constructively challenge without formal authority. Strong people leadership, collaboration, judgment, critical thinking, root cause analysis,