Sr. Manager, IT Internal Audit

Job description

onsemi is seeking a Manager, IT Internal Audit to play a key leadership role in the continued evolution and modernization of onsemi's internal audit function. This position offers a unique opportunity to shape the future of technology risk management, cybersecurity assurance, AI governance, and audit automation while serving as a trusted business partner and advisor to the IT organization. As onsemi modernizes its technology ecosystem, simplifies and standardizes processes, and accelerates the adoption of AI, automation, and advanced analytics, this leader will help strengthen our technology risk and control environment while driving innovation across internal audit practices.

Reporting to the VP, Internal Audit, the successful candidate will bring deep knowledge of technology risk and control environments, a passion for leveraging automation, AI, and data-driven insights to transform audit effectiveness, and strong interpersonal skills to influence within a multinational technology company.

Responsibilities

• Recruit, coach, and manage a global IT audit team, fostering continuous professional growth, driving accountability, and managing performance to deliver results
• Manage the lifecycle of technology and cybersecurity audits, from risk assessment and planning to testing and reporting, ensuring alignment with the annual internal audit plan and departmental standards; collaborate with co-sourcing partners, as needed
• Lead the design and implementation of innovative audit approaches leveraging automation, AI, analytics, and continuous monitoring to modernize audit delivery and generate data-driven risk insights
• Provide subject matter expertise for global IT operational audit activities by evaluating IT-related risks, assessing testing procedures and outcomes, and collaborating with management to remediate process and control deficiencies
• Serve as a trusted advisor to management on digital transformation, IT process maturity, cybersecurity resilience, AI adoption, and emerging technology risks while building strong relationships across IT, cybersecurity, and business functions
• Lead key technical audit activities, such as Enterprise Data Governance, Enterprise AI Governance, Third-Party Risk Management, Disaster Recovery, and validation of Oracle Cloud Fusion and Risk Management Cloud (RMC) controls
• Communicate complex technical and business risks through concise, executive-level reporting and presentations to audit leadership, executive management, and the Audit Committee; monitor timely remediation of identified issues and ensure deliverables meet professional and departmental standards

Qualifications

Bachelor’s degree in Information Systems, Accounting, Computer Science, or a related field; CISA, CISSP, CIA, or equivalent professional certification required. 5-7 years of experience in internal or external audit, technology risk, cybersecurity, or IT controls within a Big 4 firm or U.S. public company. Proven experience leading teams and managing complex audit, advisory, and assurance engagements while building trusted relationships with business and technology leaders.

Experience leading IT risk assessments, developing risk-based audit plans, and executing audits across technology, cybersecurity, and operational environments. Strong knowledge of IT governance and control frameworks, including COSO, COBIT, NIST, ISO 27001, ITIL, SOX, SSAE 18, SOC reporting, and data privacy requirements. Strong leadership, project management, and executive communication skills with the ability to translate complex technical risks into clear, actionable insights for senior leadership and the Audit Committee.

Demonstrated ability to influence change, manage multiple priorities, drive results across cross-functional teams, and operate with the highest level of integrity. Passion for continuous learning, innovation, and leveraging technology to enhance audit effectiveness and business outcomes. Familiarity with generative AI technologies and a demonstrated ability to identify opportunities to improve productivity, decision-making, and business outcomes through AI-and automation enabled solutions.

Ability to travel domestically and internationally, up to 10%.

Preferred Qualifications

Experience within a global manufacturing environment, including familiarity with Manufacturing Execution Systems (MES) and Operational Technology (OT) risks. Experience evaluating complex technology environments, including ERP transformations, Oracle Cloud Fusion, EPM, Risk Management Cloud (RMC), cloud platforms, and IT Service Management (ITSM) processes. Experience assessing advanced cybersecurity and emerging technology risks, including AI governance, Privileged Access Management (PAM), Third-Party Risk Management (TPRM), M&A technology due diligence, and technology change management.

Experience with data architecture, data quality, data lineage, and data governance concepts. Proficiency with analytics and visualization tools such as Power BI, Tableau, Alteryx, Snowflake, SQL, Python, or similar technologies. Experience with SaaS- based audit management platforms.