Internal Audit Senior Manager, Technology Audit

Yahoo serves as a trusted guide for hundreds of millions of people globally, helping them achieve their goals online through our portfolio of iconic products. For advertisers, Yahoo Advertising offers omnichannel solutions and powerful data to engage with our brands and deliver results.

A Little About Us

Yahoo Internal Audit (the Control Freaks) gives management and the Audit Committee independent, objective, risk-driven insight, and advice. Our goal is to help Yahoo innovate and grow while protecting its value. Our scope covers the whole company, through risk-based audits, advisory projects, and investigations. We are continuously investing in technology, automation and AI to create efficiencies and address risks. The role will manage Internal Audit's technology coverage by supporting risk assessment and advising on related risks. You will lead audits and advisory projects across infrastructure, security, cloud, data and AI, and be the Internal Audit contact Technology leaders go to first. This is a senior, hands-on role: projects will require you to oversee staff (a combination of in-house and co-source arrangements), but at the end of the day our department functions as a team and everyone contributes to performing the work (testing, reviewing, strategizing).

What You'll Do:

• Plan the technology audit work
  • Assess technology risks and interview Technology leaders as input to the risk assessment and audit plan
  • Coordinate with other risk-based functions (via councils, committees, etc.) to identify risks and opportunities to partner or account for risk mitigation activities underway
  • Scope technology audits and advisory projects so they cover the risks that matter most to management and the Audit Committee
• Run audits and advisory projects
  • Lead technology audits and advisory projects, from planning to final report. Example topics may include cybersecurity, identity and access management, cloud security, operational resilience, data governance, privacy and AI
  • Review workpapers and own the quality of the IT audit work, ensuring work is consistent with IA methodology and the IIA’s Global Internal Audit Standards.
  • Write clear reports and present findings to senior management
  • Continue enhancing IA's approach to auditing AI, including AI governance, model risk, and the use of AI agents
• Build technology audit capabilities
  • Develop auditors to support technology audits, including risk assessment, testing and documentation
  • Direct co-source specialists on technology work, as needed
  • Use AI, data analytics, and automation to enhance audit testing, expand coverage, and improve efficiency, applying professional judgment to validate results.
• Partner across the company
  • Build trusted relationships with Technology, Security, Privacy and Engineering leaders. Stay current on how their organizations and risks are changing
  • Coordinate with the SOX team, Security and GRC, and the external auditors so technology coverage is shared, not duplicated
  • Lead special projects, investigations and IA improvement initiatives as needed

What You'll Need:

• Bachelor's degree, or equivalent experience
• 8+ years of IT audit experience, with at least 3 years leading audits or engagement teams
• Hands-on knowledge of information security, identity and access, change management, IT operations, cloud environments and business continuity
• Strong, current knowledge of emerging cyber and AI risks, such as ransomware, cloud and identity attacks, third-party exposure, AI misuse and data leakage, and how to audit them
• Familiarity with COSO, COBIT, NIST CSF, MITRE and the IIA Global Internal Audit Standards
• Excellent written and verbal communication with technical and non-technical senior leaders
• Good judgment on independence: you advise management without taking over their decisions, and you hold your view when it counts
• Experience directing and coaching auditors and co-source providers day-to-day, including without formal reporting lines

Preferred Qualifications:

• CISA strongly preferred; CISSP, CIA or a cloud security certification is a plus
• Adaptable, curious, and pragmatic problem-solver who thrives in fast-moving environments and embraces continuous learning and experimentation with emerging technologies.
• A team player and works well in a collaborative environment
• A creative, pragmatic approach to solving complex problems
• Experience auditing AI or machine learning systems, or with AI governance frameworks such as the NIST AI RMF or ISO 42001
• Using data analytics or automation in audit work
• Experience in media, advertising technology, or consumer technology is considered a plus

#LI-KS2

The material job duties and responsibilities of this role include those listed above as well as adhering to Yahoo policies; exercising sound judgment; working effectively, safely and inclusively with others; exhibiting trustworthiness and meeting expectations; and safeguarding business operations and brand integrity.

At Yahoo, we offer flexible hybrid work options that our employees love! While most roles don’t require regular office attendance, you may occasionally be asked to attend in-person events or team sessions. You’ll always get notice to make arrangements. Your recruiter will let you know if a specific job requires regular attendance at a Yahoo office or facility. If you have any questions about how this applies to the role, just ask the recruiter!

Yahoo is proud to be an equal opportunity workplace. All qualified applicants will receive consideration for employment without regard to, and will not be discriminated against based on age, race, gender, color, religion, national origin, sexual orientation, gender identity, veteran status, disability or any other protected category. Yahoo will consider for employment qualified applicants with criminal histories in a manner consistent with applicable law.

Yahoo is dedicated to providing an accessible environment for all candidates during the application process and for employees during their employment. If you need accessibility assistance and/or a reasonable accommodation due to a disability, please submit a request via the Accommodation Request Form (www.yahooinc.com/careers/contact-us.html) or call +1.866.772.3182. Requests and calls received for non-disability related issues, such as following up on an application, will not receive a response.

We believe that a diverse and inclusive workplace strengthens Yahoo and deepens our relationships. When you support everyone to be their best selves, they spark discovery, innovation and creativity. Among other efforts, our 11 employee resource groups (ERGs) enhance a culture of belonging with programs, events and fellowship that help educate, support and create a workplace where all feel welcome.

The compensation for this position ranges from $110,625.00 - $230,625.00/yr and will vary depending on factors such as your location, skills and experience. The compensation package may also include incentive compensation opportunities in the form of discretionary annual bonus or commissions. Our comprehensive benefits include healthcare, a great 401k, backup childcare, education stipends and much (much) more.

Currently work for Yahoo? Please apply on our internal career site.