Internal Audit Specialist Jobs
Internal Audit Specialist jobs are open across financial services, healthcare, manufacturing, and government, from entry-level to senior and manager, with specializations in SOX compliance, IT audit, and operational risk. See the openings below and apply to the ones that match your experience.
Find JobsLooking for remote work? View remote internal audit specialist jobs →Overview
Showing 5 of 460+ Internal Audit Specialist jobs
Job Summary And Mission
The Director, IT Audit plays a critical leadership role in strengthening Starbucks' technology control environment, technology risk management practices, cybersecurity governance, and resilience. This role provides strategic and operational oversight of IT audit activities, partners closely with technology and business leaders, and delivers objective assurance and advisory services that protect enterprise value and enable responsible technology transformation.
The Director is expected to operate as a trusted advisor on technology risk, balancing independence with strong collaboration across the enterprise.
Summary Of Key Responsibilities
Leadership & Strategy
- Lead the planning and execution of a risk-based IT audit plan aligned with enterprise technology risks, business priorities, and the broader internal audit plan.
- Manage, coach, and develop IT audit professionals; foster a culture of accountability, continuous improvement, technical excellence, and professional growth.
- Advance the IT audit strategy, methodologies, and use of data analytics, automation, and continuous auditing techniques.
Audit Execution & Oversight
- Oversee technology, cybersecurity, cloud, infrastructure, application, data, third-party technology, and integrated audits and Sarbanes Oxley (SOX) testing to ensure high-quality, timely, and actionable results.
- Ensure IT audit work adheres to applicable professional standards (IIA Standards), internal quality guidelines, and recognized technology and cybersecurity control frameworks.
- Review and approve IT audit risk assessments, scopes, work programs, testing approaches, findings, and final reports.
Risk Management & Advisory
- Assess the design and operating effectiveness of technology controls, including cybersecurity, identity and access management, change management, IT operations, data governance, cloud services, business continuity, and disaster recovery.
- Provide proactive advisory support for major system implementations, technology transformations, cloud initiatives, cybersecurity programs, artificial intelligence, and other emerging technologies.
- Identify themes, trends, and systemic technology risks across audit activities and communicate insights to senior leadership.
Stakeholder Management
- Build strong relationships with technology leadership, information security, data and privacy leaders, business unit leaders, compliance, legal, and external auditors.
- Communicate IT audit results clearly and persuasively, translating complex technical risks into business impact, root causes, and practical remediation recommendations.
- Monitor technology-related management action plans and report on remediation progress, residual risk, and risk exposure.
Governance & Reporting
- Support Audit Committee materials and presentations, as applicable.
- Prepare concise, impactful reporting on IT audit results, key technology risks, control issues, and cross-enterprise themes.
- Maintain independence, objectivity, confidentiality, and appropriate handling of sensitive technology and security information in all audit activities.
Required
Summary of Experience:
- 10+ years of progressive experience in IT audit, technology risk, cybersecurity, information security, technology consulting, or a related discipline.
- Prior experience leading IT audit teams and managing complex, cross-functional technology audits.
- Strong knowledge of IT general controls, application controls, cybersecurity, cloud computing, systems development and implementation, data governance, and technology risk assessment methodologies.
Preferred
- Experience in a complex, highly regulated, or publicly traded environment with large-scale technology operations.
- Demonstrated experience with technology and cybersecurity frameworks, audit technology tools, data analytics, automation, and continuous auditing techniques.
Education And Certification
- Bachelor's degree in Information Systems, Computer Science, Cybersecurity, Accounting, Finance, Business, or a related field.
- Professional certification(s): CISA required or strongly preferred; CIA, CISSP, CPA, CRISC, or equivalent certifications are also valued.
Starbucks Coffee Company is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, age, national origin, disability, or protected veteran status, or any other characteristic protected by law.
Qualified applicants with criminal histories will be considered for employment in a manner consistent with all federal, state and local ordinances.
Pay: $165,800.00 - $319,000.00 per year
Benefits:
- 401(k) matching
- Dental insurance
- Employee assistance program
- Employee discount
- Flexible schedule
- Flexible spending account
- Health savings account
- Life insurance
- Paid time off
- Parental leave
- Professional development assistance
- Retirement plan
- Vision insurance
Work Location: In person
Job Summary And Mission
The Director, IT Audit plays a critical leadership role in strengthening Starbucks' technology control environment, technology risk management practices, cybersecurity governance, and resilience. This role provides strategic and operational oversight of IT audit activities, partners closely with technology and business leaders, and delivers objective assurance and advisory services that protect enterprise value and enable responsible technology transformation.
The Director is expected to operate as a trusted advisor on technology risk, balancing independence with strong collaboration across the enterprise.
Summary Of Key Responsibilities
Leadership & Strategy
- Lead the planning and execution of a risk-based IT audit plan aligned with enterprise technology risks, business priorities, and the broader internal audit plan.
- Manage, coach, and develop IT audit professionals; foster a culture of accountability, continuous improvement, technical excellence, and professional growth.
- Advance the IT audit strategy, methodologies, and use of data analytics, automation, and continuous auditing techniques.
Audit Execution & Oversight
- Oversee technology, cybersecurity, cloud, infrastructure, application, data, third-party technology, and integrated audits and Sarbanes Oxley (SOX) testing to ensure high-quality, timely, and actionable results.
- Ensure IT audit work adheres to applicable professional standards (IIA Standards), internal quality guidelines, and recognized technology and cybersecurity control frameworks.
- Review and approve IT audit risk assessments, scopes, work programs, testing approaches, findings, and final reports.
Risk Management & Advisory
- Assess the design and operating effectiveness of technology controls, including cybersecurity, identity and access management, change management, IT operations, data governance, cloud services, business continuity, and disaster recovery.
- Provide proactive advisory support for major system implementations, technology transformations, cloud initiatives, cybersecurity programs, artificial intelligence, and other emerging technologies.
- Identify themes, trends, and systemic technology risks across audit activities and communicate insights to senior leadership.
Stakeholder Management
- Build strong relationships with technology leadership, information security, data and privacy leaders, business unit leaders, compliance, legal, and external auditors.
- Communicate IT audit results clearly and persuasively, translating complex technical risks into business impact, root causes, and practical remediation recommendations.
- Monitor technology-related management action plans and report on remediation progress, residual risk, and risk exposure.
Governance & Reporting
- Support Audit Committee materials and presentations, as applicable.
- Prepare concise, impactful reporting on IT audit results, key technology risks, control issues, and cross-enterprise themes.
- Maintain independence, objectivity, confidentiality, and appropriate handling of sensitive technology and security information in all audit activities.
Required
Summary of Experience:
- 10+ years of progressive experience in IT audit, technology risk, cybersecurity, information security, technology consulting, or a related discipline.
- Prior experience leading IT audit teams and managing complex, cross-functional technology audits.
- Strong knowledge of IT general controls, application controls, cybersecurity, cloud computing, systems development and implementation, data governance, and technology risk assessment methodologies.
Preferred
- Experience in a complex, highly regulated, or publicly traded environment with large-scale technology operations.
- Demonstrated experience with technology and cybersecurity frameworks, audit technology tools, data analytics, automation, and continuous auditing techniques.
Education And Certification
- Bachelor's degree in Information Systems, Computer Science, Cybersecurity, Accounting, Finance, Business, or a related field.
- Professional certification(s): CISA required or strongly preferred; CIA, CISSP, CPA, CRISC, or equivalent certifications are also valued.
Starbucks Coffee Company is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, age, national origin, disability, or protected veteran status, or any other characteristic protected by law.
Qualified applicants with criminal histories will be considered for employment in a manner consistent with all federal, state and local ordinances.
Pay: $165,800.00 - $319,000.00 per year
Benefits:
- 401(k) matching
- Dental insurance
- Employee assistance program
- Employee discount
- Flexible schedule
- Flexible spending account
- Health savings account
- Life insurance
- Paid time off
- Parental leave
- Professional development assistance
- Retirement plan
- Vision insurance
Work Location: In person
Internal Audit Specialist Jobs by Experience Level
See All 460+ Internal Audit Specialist Jobs
Find roles that match your experience and apply in just a few clicks.
Find JobsInternal Audit Specialist Job Market
Who's Hiring
- Baker Tilly Canada17
- Goldman Sachs16
- Amazon12
- Protiviti11
- Morgan Stanley10
Top Industries Hiring
- Banking & Financial Services19
- Investment & Asset Management17
- Accounting & Auditing12
- Manufacturing5
- Automotive4
What Employers Look For
The qualifications that appear most often in internal audit specialist jobs.
- Bachelor's degree in accounting, finance, or a related field
- Experience conducting internal audits under IIA professional standards
- SOX compliance testing and documentation experience
- Proficiency with audit management software and data analytics tools
- CIA, CPA, or CISA certification preferred or required
- Strong written communication skills for audit reports and findings
Tips for Your Internal Audit Specialist Job Search
Tailor your resume to audit frameworks
Hiring managers scan for specific frameworks like COSO, IIA standards, and SOX 302 and 404. Name the exact frameworks you've worked within, the control environments you tested, and the audit cycles you completed, not just generic compliance experience.
Highlight findings that led to action
Internal audit resumes stall when they list responsibilities without outcomes. Describe audit findings that resulted in control improvements, process changes, or risk rating downgrades. Managers want evidence you influenced something, not just documented it.
Filter openings by audit focus area
Internal audit specialist roles split sharply between financial, operational, and IT audit. Applying to every listing wastes time. Read each posting for the dominant focus, then apply only where your experience in that area is genuine and demonstrable.
Apply early to roles that fit
Migrate Mate lists internal audit specialist openings from across the United States in one place, so you can find roles that match and apply directly to each listing.
Prepare for a technical pre-screen
Many employers give a short written or verbal technical screen before the first interview. Expect questions on walkthrough procedures, risk and control matrices, and how you document audit evidence. Reviewing your most recent audit workpapers before the call keeps details sharp.
Negotiate using total compensation context
Internal audit roles at financial institutions and public companies often include bonus structures tied to departmental or firm performance. Ask about the full compensation package, including professional development budgets and CPA or CIA exam reimbursement, before accepting any offer.
Internal Audit Specialist Jobs: Frequently Asked Questions
Which companies are hiring the most internal audit specialists?
The most active employers for internal audit specialists right now are Baker Tilly Canada, Goldman Sachs, and Amazon, and the most openings are in New York, California, and Texas, based on current listings on Migrate Mate as of November 2026. Financial services, healthcare systems, and large manufacturers tend to post the most roles year-round.
How many internal audit specialist jobs are remote?
About 77% of internal audit specialist openings are fully remote or hybrid as of November 2026, with availability varying by industry and employer size. IT audit and data analytics-focused roles are most likely to be fully remote, while operational and financial audit positions often require on-site access to facilities, records, and business unit staff.
How do you become an internal audit specialist?
Start with a bachelor's degree in accounting, finance, or business, then gain entry-level experience in public accounting or a corporate audit department. Earning a CIA or CPA credential strengthens your candidacy significantly. Build hands-on experience with risk assessments, control testing, and audit documentation before moving into a specialist role.
Can you get hired as an internal audit specialist with little experience?
Yes, some employers hire candidates with one to two years in public accounting or a staff auditor role and train them on internal audit methodology. Emphasizing exposure to control environments, any SOX testing you assisted with, and familiarity with IIA standards positions you as a credible candidate even without a dedicated internal audit title on your resume.
What does the internal audit specialist interview process look like?
Most processes include an initial phone screen with HR, a technical interview focused on audit methodology, risk assessment, and control testing, and a final round with the chief audit executive or senior leadership. Some employers add a written case study where you assess a hypothetical control weakness and draft a mock finding or recommendation.
Where can I find and apply to internal audit specialist jobs?
You can find and apply to internal audit specialist jobs on Migrate Mate, which lists current openings from across the United States. Search the listings to find roles that match your experience level and audit specialization, then apply directly to each one that fits.
See All 460+ Internal Audit Specialist Jobs
Find roles that match your experience and apply in just a few clicks.
Find Jobs