Senior Cyber Security Auditor

About the role

Ahold Delhaize, one of the world's largest food retail groups, is hiring a Senior Cyber Security Auditor for its Internal Audit team in the United States. The role provides independent assurance and advisory services on cyber security, technology, data and digital initiatives, working with business and technology leaders to strengthen cyber resilience. It is a hybrid position with three in-person days and two remote days, based in Salisbury, NC, Carlisle, PA or Quincy, MA.

Key responsibilities

• Lead and execute cyber security and technology audits across Ahold Delhaize USA, evaluating the effectiveness of risk management practices and controls.
• Review cyber security governance, IAM and PAM, cloud security (Azure), network security, security operations and incident response, vulnerability and patch management, application and DevSecOps security, third-party security, data protection and emerging technologies such as AI.
• Lead risk assessments, audit planning, fieldwork, reporting and follow-up, and present findings to management and senior stakeholders.
• Evaluate the design and operating effectiveness of cyber security controls and turn technical observations into business risks and recommendations.
• Coach team members, build relationships with cyber security, technology and business leaders, and identify emerging risks and opportunities.

Required profile

• Intellectually curious, motivated professional with strong cyber security knowledge and excellent communication skills.
• Comfortable challenging assumptions and building credibility with technical and non-technical stakeholders.
• Preferred: Bachelor's or Master's degree in Cyber Security, Computer Science, Information Systems or Information Technology.
• Preferred: 5+ years of experience in cyber security, IT audit, risk assessment, security consulting or a similar role.
• Preferred: experience independently assessing cyber security controls and leading complex audit engagements from planning to reporting; travel within the United States up to 10-20%.
• Must be authorized to work in the United States on a full-time basis.

Required skills

• Cyber security frameworks and standards: NIST CSF, ISO 27001, CIS Critical Security Controls, PCI DSS.
• Cloud security (Microsoft Azure), identity and access management, network security, security operations, vulnerability and configuration management, application security and DevSecOps, third-party security risk management.
• Professional certifications such as CISSP, OSCP or AZ-500 preferred.

What we offer

• Salary range of $108,880-$163,320 (NC/PA) and $125,200-$187,800 (MA); performance-based incentives and comprehensive benefits.
• Hybrid work, flexible arrangements and a collaborative environment.
• Professional growth, development and certification support, and international career options across Ahold Delhaize brands.