Lead Engineering and Security Audito

About the position

Apple is a place where extraordinary people gather to do their best work. If you're excited by the idea of making a real impact, a career with Apple might be your dream job—just be prepared to dream big! As a highly skilled individual with broad experience in evaluating technology risk areas from multiple perspectives, you are passionate about executing projects and proposing thoughtful and practical solutions as recommendations. You are a motivated individual and are skilled at navigating complex environments both technically and organizationally to get quality projects done. If you are a highly motivated self-starter who thrives in ambiguity and dynamic environments, then you should consider joining us. The Internal Audit Department is seeking a Lead Engineering and Security Auditor who possesses a broad and diverse skillset to lead complex audit projects and assessments from start to finish. In this role, you will leverage your experience and expertise to actively identify risk areas and be a key contributor to the development of our plan. You will also play a crucial role in scoping, executing, and delivering a portfolio of technical projects. This is a high-visibility role on a small team that will provide you an opportunity to contribute to the organization's control environment while also gaining exposure to many business areas.

Responsibilities

• Lead complex audit projects and assessments from start to finish.
• Identify risk areas and contribute to the development of audit plans.
• Scope, execute, and deliver a portfolio of technical projects.
• Collaborate with cross-functional partners on detail-oriented projects.
• Develop and deliver effective presentations to various audiences.

Requirements

• 10+ years experience in performing highly technical audits/assessments or leading or developing technical risk and compliance programs for engineering and security organizations.
• Bachelor's degree in Computer Science, Engineering, or related discipline, or commensurate experience.
• Advanced knowledge and hands-on experience in technology practices and controls.
• Significant experience with public/private/hybrid cloud concepts (e.g., GCP, AWS).
• Understanding of key infrastructure including micro-services architectures, Git, Infrastructure-as-a-code, Kubernetes, CI/CD frameworks.
• Advanced knowledge and experience with compliance and regulatory standards (e.g., DMA, DSA, PCI, ISO, Sarbanes Oxley, SOC 1, SOC 2, HIPAA, GDPR).
• Knowledge and understanding of software engineering languages (e.g., Python, SQL).

Nice-to-haves

• CISSP and CISA certifications are preferred but not required.
• SAP knowledge and experience is a plus.
• Experience in developing scalable continuous monitoring solutions.