Business Assurance and Compliance Auditor
Core
Assess and test IT and security controls against compliance frameworks (SOX, PCI, privacy, SOC 1/2, NIST CSF) and identify risks from new technologies including AI/ML systems.
Role type
Senior IT audit and compliance auditor
Builds
Control responses and standards for managing compliance risk across Apple's technology and business organizations
Domain
Technology, Finance, and Regulatory Compliance
Required skills
IT audit, information security, compliance frameworks (SOX, PCI, GDPR, NIST CSF), ERP and cloud environment testing, access management, vulnerability management, incident response, data protection, AI governance, regulatory interpretation, process walkthroughs, project management
Preferred skills
Big 4 or large regional public accounting firm experience, multi-cloud environment controls, Chinese and European regulatory requirements, Order to Cash and Purchase to Payables processes
Technologies
ERP, cloud environments, multi-cloud platforms, AI/ML systems, GenAI tooling, NIST CSF 2.0, PCI DSS 4.0
Responsibilities
Lead or contribute to process and systems walkthroughs for risk or control gap assessments, test controls across ERP and cloud environments, identify risks introduced by new technologies including AI/ML systems, translate regulatory and technology trends into practical control requirements, collaborate with subject matter experts and business partners to shape compliance standards
Seniority
Mid-level, hands-on IC