Senior Manager, IT Audit at Estée Lauder Companies

Job description

The Estée Lauder Companies Inc. is one of the world’s leading manufacturers, marketers, and sellers of quality skin care, makeup, fragrance, and hair care products, and is a steward of luxury and prestige brands globally. The company’s products are sold in approximately 150 countries and territories under brand names including: Estée Lauder, Aramis, Clinique, Lab Series, Origins, M·A·C, La Mer, Bobbi Brown Cosmetics, Aveda, Jo Malone London, Bumble and bumble, Darphin Paris, TOM FORD, Smashbox, AERIN Beauty, Le Labo, Editions de Parfums Frédéric Malle, GLAMGLOW, KILIAN PARIS, Too Faced, Dr.Jart+, the DECIEM family of brands, including The Ordinary and NIOD, and BALMAIN Beauty. Description The Senior Manager, IT Internal Audit will lead global technology risk assessments, audit planning, and complex IT audit engagements across The Estée Lauder Companies’ brands, regions, and corporate functions. This role will evaluate technology, cybersecurity, cloud, application, infrastructure, and data-related risks; provide practical advisory insights to senior stakeholders; oversee remediation follow-up; and contribute to the development of a risk-based global internal audit plan. Key Responsibilities Lead global IT and cybersecurity risk assessments and contribute to the risk-based annual internal audit plan. Plan and oversee complex IT audit and advisory engagements from scoping through reporting and remediation validation. Assess technology risks across cybersecurity, retail, e-commerce, finance, manufacturing, supply chain, cloud, infrastructure, and business applications. Evaluate controls across environments including Microsoft Azure, Amazon Web Services, Google Cloud, Windows, UNIX/Linux, Oracle, SAP, Hyperion, and internally developed applications. Oversee the audit follow-up process, including remediation tracking, validation, escalation, and reporting. Build and maintain effective working relationships with senior stakeholders across technology, cybersecurity, privacy, finance, and business functions. Collaborate with internal and external stakeholders to identify risks, develop practical recommendations, and support sustainable solutions. Use data analytics and automation tools—including SQL, Alteryx, and Power BI—to support audit testing and generate data-driven insights. Prepare clear, concise audit reports and presentations summarizing work performed, findings, risks, and recommendations. Manage multiple engagements and priorities in a fast-paced, global environment. Contribute to the continuous improvement of IT audit methodologies, tools, and risk assessment practices. Qualifications Required Qualifications 8 or more years of experience in IT internal audit, IT risk management, IT compliance, cybersecurity, or IT assurance and advisory services. Bachelor’s degree in computer science, information systems, engineering, data science, or a related field. Proven experience leading complex projects and working independently and collaboratively in cross-functional teams. Strong knowledge of technology, cybersecurity, cloud, application, infrastructure, and/or privacy risks. Familiarity with relevant frameworks and standards, such as COSO, COBIT, ISO 27001, NIST, and ITIL. Demonstrated project management and organizational skills, with the ability to manage multiple priorities. Excellent written, verbal, presentation, and relationship-management skills. Preferred Qualifications CISA, CISM, CISSP, CIA, CPA, or another relevant certification, completed or in progress. Experience with SQL, Alteryx, Power BI, or other audit analytics tools. Experience in consumer products, retail, manufacturing, or supply chain industries. Knowledge of application security, network security, cloud security, and secure software development practices. Experience working in a global or multinational organization. Pay Range: The anticipated base salary range for this position is $122,900.00 to $190,000.00 . Exact salary depends on several factors such as