Senior Internal Audit Manager — Technology Risk, Cybersecurity & AI Assurance

Leads IT audit engagements and helps advance Applied Materials' IT audit practice, providing independent assurance over technology, cybersecurity, and AI risk across a global enterprise at the center of the semiconductor industry. A senior, hands-on manager who influences across organizational boundaries, leads cross-functional teams, directs third-party specialists, and helps drive AI adoption within Global Internal Audit (GIA).

## Job Description

Global Internal Audit (GIA) is transforming how technology assurance gets done at Applied Materials, and we are hiring a Senior Internal Audit Manager to help lead that transformation. You will audit cloud, cybersecurity, and AI risk across a global manufacturing, laboratory, and R&D environment, and influence how the practice evolves — its methods, its tooling, and its scope.

IT audit carries the heaviest weighting of the role, complemented by advisory work and AI enablement. You will partner with leaders across Global Information Services (GIS), including the Chief Information Security Officer and Chief Data Officer organizations, and report to the Senior Director who leads IT Audit, Audit Analytics, and Enterprise Risk Management (ERM).

We welcome candidates who built their expertise in IT operations and infrastructure, cybersecurity, information security, technology risk, or IT audit, and are particularly interested in people who have worked both sides of the control, in operations and in assurance. You should be comfortable going a level deeper than the summary, following a technical discussion on its own terms and knowing where to press. Deep specialization in any single technology is not required.

## Key Responsibilities

• Lead complex IT audits across infrastructure, network and endpoint security, identity and access management (IAM), cloud platforms and security, application controls, data protection, resilience, and site, laboratory, and OT security
• Drive risk assessment and audit planning — lead risk interviews across the business and technology organizations, prioritize the technology audit slate, and build actionable audit plans behind it
• Influence across boundaries — shape the technology risk agenda with GIS, business, and operations partners, build alignment with senior leadership, and drive a shared vision within the IT Audit team
• Lead cross-functional teams with disciplined project management, spanning GIA auditors, guest auditors from business and technical functions, and external contractors and consultants
• Direct third-party engagements — co-source partners, staff augmentation, and specialist providers across technology, security, and governance, including penetration testing, red / purple team exercises, and targeted technical assessments
• ·Assure AI in use across the business, including agentic AI and citizen-developed tools, confirming it is secure, appropriately controlled, well governed, and aligned to applicable regulations
• ·Advance how GIA works — apply AI across the audit lifecycle, from risk assessment and execution to continuous monitoring, control automation, reporting, quality assurance, and analytics, and help deploy modern audit methodologies and tools, including agile auditing
• Advise the business in areas such as cyber resilience, supplier cyber risk, and data governance
• Assure transformation programs — independent assurance over major technology and platform initiatives, partnering across all GIA pillars
• Coach and develop IT audit professionals, building technical depth across the team and raising the practice toward best-in-class

## Functional Knowledge

• Technology risk and controls across IT operations, infrastructure, networks, endpoints, and enterprise platforms, including IT general controls (ITGC) and IT application controls (ITAC)
• Cybersecurity operations and architecture, including threat and vulnerability management, security monitoring and incident response, identity and access management, and data protection
• Cloud platforms and cloud security (MS Azure, AWS, GCP), including cloud identity, configuration management, and workload protection
• Enterprise AI architecture, including third-party foundation models, retrieval-augmented generation (RAG) pipelines, orchestration and multi-agent workflows, Model Context Protocol (MCP) servers and gateways, and AI embedded within purchased software
• AI risk and control surface, including agent and AI inventory, non-human identity and entitlements, shadow AI detection, prompt injection and data exfiltration, RAG permission inheritance, human-in-the-loop checkpoints, and traceability of agent actions
• AI and technology risk frameworks and regulation, including the NIST AI Risk Management Framework, ISO/IEC 42001, the EU AI Act, the NIST Cybersecurity Framework, ISO/IEC 27001, COBIT, and CIS Controls
• Internal audit methodology and practice, including risk-based audit planning, controls design and testing, Institute of Internal Auditors (IIA) standards, and external audit methodology and coordination

## Business Expertise

• Connects technology risk to business strategy, operations, and financial outcomes, and frames it in terms leaders can act on
• Experience in complex, technology-intensive environments — semiconductor, advanced manufacturing, or other intellectual-property-intensive industries — is a plus

## Leadership

• A proven influencer who builds alignment without direct authority across technology, security, business, and operations, and earns the confidence of senior leadership
• Earns credibility with technical partners through genuine domain understanding, and converts that credibility into influence
• Sets a high bar for integrity, technical quality, and ownership, and champions new technology, AI, and modern methods in IT Audit

## Problem Solving

• Translates ambiguous direction into well-scoped plans, focuses deep technical effort where risk concentrates, and applies sound judgment in emerging areas such as AI where established practice is still forming

## Impact

• Strengthens the assurance Applied obtains over its technology, cybersecurity, and AI risk, and influences how that risk is prioritized and remediated across the global technology organization

## Interpersonal Skills

• Explains complex technical risk clearly to audiences from subject matter experts to executive leadership, defends conclusions on their merits under detailed technical questioning, and builds lasting, trust-based relationships

## Education & Experience

• Bachelor's degree in Management Information Systems, Computer Science, Cybersecurity, Engineering, or a related field; master's degree in a technical discipline preferred
• 10+ years of progressive experience in IT operations and infrastructure, cybersecurity, information security, technology risk, security operations, or IT audit, including leading complex technology audits or security and control programs, leading cross-functional teams, and directing third-party specialists; Big 4 or comparable technology or cyber risk experience preferred
• Professional certification strongly preferred, such as CISA, CISSP, CISM, CRISC, CCSP, CGEIT, PMP, or ISACA Advanced in AI Audit (AAIA)

Education — Minimum: Bachelor's Degree

Education — Field of Study: Management Information Systems; Computer Science; Cybersecurity; Engineering; or related

Years of Experience: 10+

Certifications (Preferred): CISA · CISSP · CISM · CRISC · CCSP · CGEIT · PMP · ISACA Advanced in AI Audit (AAIA)

Skills: IT Audit · Internal Audit · Technology Risk · Cybersecurity · Information Security · IT General Controls (ITGC) · Cloud Security · Identity and Access Management (IAM) · Risk Assessment · Internal Controls · IT Infrastructure · Security Operations · Vulnerability Management · Penetration Testing · Incident Response · Third-Party Risk Management · Audit Planning · NIST Cybersecurity Framework · ISO 27001 · COBIT · SOC 2 · Artificial Intelligence (AI) · AI Governance · Data Governance · Application Security · Operational Technology (OT) Security · Microsoft Azure · Amazon Web Services (AWS) · Project Management · Stakeholder Management

Languages: English

## Qualifications

### Education:

Bachelor's Degree

### Skills

### Certifications:

### Languages:

### Years of Experience:

10 - 15 Years

### Work Experience:

## Additional Information

###

### Shift:

10-Day 8-Hr (United States of America)

###

### Travel:

Yes, 20% of the Time

###

### Relocation Eligible:

Yes

### Referral Payment Plan:

Employee Referral (Standard)

Salary Range:

$140,000.00 - $192,500.00

The salary offered to a selected candidate will be based on multiple factors including location, hire grade, job-related knowledge, skills, experience, and with consideration of internal equity of our current team members. In addition to a comprehensive benefits package, candidates may be eligible for other forms of compensation such as participation in a bonus and a stock award program, as applicable.

For all sales roles, the posted salary range is the Target Total Cash (TTC) range for the role, which is the sum of base salary and target bonus amount at 100% goal achievement.

Applied Materials is an Equal Opportunity Employer committed to diversity in the workplace. All qualified applicants will receive consideration for employment without regard to race, color, national origin, citizenship, ancestry, religion, creed, sex, sexual orientation, gender identity, age, disability, veteran or military status, or any other basis prohibited by law.