Job Description
The IT Audit Director is preferably based in Aramark’s Philadelphia headquarters (candidates in the Eastern and Central time zones will be considered) and reports to the VP, Technology Audit and Data Analytics. The Director leads Aramark’s IT SOX program and a risk-based portfolio of technology audits covering enterprise applications, infrastructure, cybersecurity, cloud and SaaS platforms, third-party technology, and major system implementations. The role leads a team of Senior IT Auditors and IT Auditors, serves as Internal Audit’s primary IT contact for the external auditor, and builds trusted working relationships with technology and business leaders. The Director also helps advance the team’s use of data analytics, automation, and approved AI to improve audit coverage and quality. Compensation will be competitive and commensurate with experience.
Job Responsibilities
• Lead the IT SOX program and a portfolio of technology audits across applications, databases, operating systems, and infrastructure. Coordinate assignments, monitor progress, and manage budgets and schedules.
• Lead or oversee audits of IT general controls, identity and access management, change management, cybersecurity, data privacy, technology resilience and disaster recovery, and cloud services.
• Contribute to the annual risk assessment and Annual Audit Plan, and own the IT SOX scope and technology audit plan within it. Using a risk-based approach, set audit scope and objectives, review and finalize audit reports, and communicate findings with practical, cost-effective recommendations.
• Review workpapers and reports prepared by Senior IT Auditors and IT Auditors before final leadership review. Maintain technology audit methodology and workpaper standards to support consistent, high-quality deliverables. Coach and develop team members through regular feedback, and support recruiting and retention.
• Serve as point of contact for audit business partners and stakeholders; assume responsibility for relationship management for specific business areas. Work in partnership with business leaders to strengthen governance, risk, and control environments by anticipating issues, providing advice, and sharing Internal Audit knowledge and best practices.
• Serve as Internal Audit's primary IT contact for the external auditor. Manage IT SOX reliance timelines, PBC escalations, deficiency evaluation, and year-end evidence quality.
• Own SOC 1/SOC 2 coverage for in-scope service organizations, including fiscal-year alignment, bridge letters, CUEC mapping, and alternative procedures when reports are unavailable.
• Provide independent risk input on system implementations and ERP selections (SDLC, data conversion, access, testing evidence, go-live readiness). Frame SOX and system-of-record impacts for management without assuming control ownership.
• Advise control owners on ownership, wording, and design of automated and access controls, including international entities.
• Administer issue tracking, remediation follow-up, and reporting in Riskonnect; validate that management action plans are completed and sustained.
• Drive the effective use of data analytics, automation, and approved AI capabilities within technology audits and the IT SOX program to enhance risk identification, audit coverage, efficiency, and quality, while ensuring appropriate governance and human review.
• Assess emerging technology risks, including cybersecurity, identity and access, cloud and SaaS, data governance, third-party technology, artificial intelligence, and technology resilience, and translate them into audit priorities and updates to the technology audit plan.
Qualifications
- 8+ years of IT audit experience in public accounting and/or internal audit, including prior people leadership.
- Demonstrated experience managing IT SOX programs, evaluating SOC reports, reviewing system implementations, and working effectively with external auditors.
- Bachelor’s degree in Information Systems, Accounting, Computer Science, or a related field.
- CISA preferred; CPA, CIA, CRISC, or CISSP preferred. Big 4 IT audit experience preferred.
- Working knowledge of ERP and enterprise environments such as Oracle EBS/Oracle Cloud, SAP, SuccessFactors, and ServiceNow, along with cloud and SaaS platforms.
- Experience with data analytics tools (e.g., Power BI, Snowflake, SQL) and practical use of AI in audit preferred.
- Strong written and verbal communication skills, with the ability to explain technical risk in business terms to senior management and to work credibly with engineers, security, and application teams.
About Aramark
Our Mission
Rooted in service and united by our purpose, we strive to do great things for each other, our partners, our communities, and our planet.
At Aramark, we believe that every employee should enjoy equal employment opportunity and be free to participate in all aspects of the company. We do not discriminate on the basis of race, color, religion, national origin, age, sex, gender, pregnancy, disability, sexual orientation, gender identity, genetic information, military status, protected veteran status or other characteristics protected by applicable law.
About Aramark
The people of Aramark proudly serve millions of guests every day through food and facilities in 15 countries around the world. Rooted in service and united by our purpose, we strive to do great things for each other, our partners, our communities, and our planet. We believe a career should develop your talents, fuel your passions, and empower your professional growth. So, no matter what you're pursuing - a new challenge, a sense of belonging, or just a great place to work - our focus is helping you reach your full potential. Learn more about working here at http://www.aramarkcareers.com or connect with us on Facebook, Instagram and Twitter.