Senior Internal Audit Manager — Technology Risk, Cybersecurity & AI Assurance

Who We Are
Applied Materials is the global leader in materials science and engineering solutions that are at the foundation of virtually every new semiconductor chip and advanced display in the world. The equipment that we create and service is essential to advancing AI and accelerating the commercialization of next-generation semiconductor chips. Join us and push the boundaries of materials science and engineering in a company at the foundation of the electronics industry. The work we do together advances the world’s technology.
What We Offer
Salary:
$140,000.00 - $192,500.00
Location:
Austin,TX
You’ll benefit from a supportive work culture that encourages you to learn, develop, and grow your career as you take on challenges and drive innovative solutions for our customers. We empower our team to push the boundaries of what is possible—while learning every day in a supportive leading global company. Visit our Careers website to learn more.
At Applied Materials, we care about the health and wellbeing of our employees. We’re committed to providing programs and support that encourage personal and professional growth and care for you at work, at home, or wherever you may go. Learn more about our benefits.
Leads IT audit engagements and helps advance Applied Materials' IT audit practice, providing independent assurance over technology, cybersecurity, and AI risk across a global enterprise at the center of the semiconductor industry. A senior, hands-on manager who influences across organizational boundaries, leads cross-functional teams, directs third-party specialists, and helps drive AI adoption within Global Internal Audit (GIA).
Job Description
Global Internal Audit (GIA) is transforming how technology assurance gets done at Applied Materials, and we are hiring a Senior Internal Audit Manager to help lead that transformation. You will audit cloud, cybersecurity, and AI risk across a global manufacturing, laboratory, and R&D environment, and influence how the practice evolves — its methods, its tooling, and its scope.
IT audit carries the heaviest weighting of the role, complemented by advisory work and AI enablement. You will partner with leaders across Global Information Services (GIS), including the Chief Information Security Officer and Chief Data Officer organizations, and report to the Senior Director who leads IT Audit, Audit Analytics, and Enterprise Risk Management (ERM).
We welcome candidates who built their expertise in IT operations and infrastructure, cybersecurity, information security, technology risk, or IT audit, and are particularly interested in people who have worked both sides of the control, in operations and in assurance. You should be comfortable going a level deeper than the summary, following a technical discussion on its own terms and knowing where to press. Deep specialization in any single technology is not required.
Key Responsibilities
Lead complex IT audits across infrastructure, network and endpoint security, identity and access management (IAM), cloud platforms and security, application controls, data protection, resilience, and site, laboratory, and OT security
Drive risk assessment and audit planning — lead risk interviews across the business and technology organizations, prioritize the technology audit slate, and build actionable audit plans behind it
Influence across boundaries — shape the technology risk agenda with GIS, business, and operations partners, build alignment with senior leadership, and drive a shared vision within the IT Audit team
Lead cross-functional teams with disciplined project management, spanning GIA auditors, guest auditors from business and technical functions, and external contractors and consultants
Direct third-party engagements — co-source partners, staff augmentation, and specialist providers across technology, security, and governance, including penetration testing, red / purple team exercises, and targeted technical assessments
·Assure AI in use across the business, including agentic AI and citizen-developed tools, confirming it is secure, appropriately controlled, well governed, and aligned to applicable regulations
·Advance how GIA works — apply AI across the audit lifecycle, from risk assessment and execution to continuous monitoring, control automation, reporting, quality assurance, and analytics, and help deploy modern audit methodologies and tools, including agile auditing
Advise the business in areas such as cyber resilience, supplier cyber risk, and data governance
Assure transformation programs — independent assurance over major technology and platform initiatives, partnering across all GIA pillars
Coach and develop IT audit professionals, building technical depth across the team and raising the practice toward best-in-class
Functional Knowledge
Technology risk and controls across IT operations, infrastructure, networks, endpoints, and enterprise platforms, including IT general controls (ITGC) and IT application controls (ITAC)
Cybersecurity operations and architecture, including threat and vulnerability management, security monitoring and incident response, identity and access management, and data protection
Cloud platforms and cloud security (MS Azure, AWS, GCP), including cloud identity, configuration management, and workload protection
Enterprise AI architecture, including third-party foundation models, retrieval-augmented generation (RAG) pipelines, orchestration and multi-agent workflows, Model Context Protocol (MCP) servers and gateways, and AI embedded within purchased software
AI risk and control surface, including agent and AI inventory, non-human identity and entitlements, shadow AI detection, prompt injection and data exfiltration, RAG permission inheritance, human-in-the-loop checkpoints, and traceability of agent actions
AI and technology risk frameworks and regulation, including the NIST AI Risk Management Framework, ISO/IEC 42001, the EU AI Act, the NIST Cybersecurity Framework, ISO/IEC 27001, COBIT, and CIS Controls
Internal audit methodology and practice, including risk-based audit planning, controls design and testing, Institute of Internal Auditors (IIA) standards, and external audit methodology and coordination
Business Expertise
Connects technology risk to business strategy, operations, and financial outcomes, and frames it in terms leaders can act on
Experience in complex, technology-intensive environments — semiconductor, advanced manufacturing, or other intellectual-property-intensive industries — is a plus
Leadership
A proven influencer who builds alignment without direct authority across technology, security, business, and operations, and earns the confidence of senior leadership
Earns credibility with technical partners through genuine domain understanding, and converts that credibility into influence
Sets a high bar for integrity, technical quality, and ownership, and champions new technology, AI, and modern methods in IT Audit
Problem Solving
Translates ambiguous direction into well-scoped plans, focuses deep technical effort where risk concentrates, and applies sound judgment in emerging areas such as AI where established practice is still forming
Impact
Strengthens the assurance Applied obtains over its technology, cybersecurity, and AI risk, and influences how that risk is prioritized and remediated across the global technology organization
Interpersonal Skills
Explains complex technical risk clearly to audiences from subject matter experts to executive leadership, defends conclusions on their merits under detailed technical questioning, and builds lasting, trust-based relationships
Education & Experience
Bachelor's degree in Management Information Systems, Computer Science, Cybersecurity, Engineering, or a related field; master's degree in a technical discipline preferred
10+ years of progressive experience in IT operations and infrastructure, cybersecurity, information security, technology risk, security operations, or IT audit, including leading complex technology audits or security and control programs, leading cross-functional teams, and directing third-party specialists; Big 4 or comparable technology or cyber risk experience preferred
Professional certification strongly preferred, such as CISA, CISSP, CISM, CRISC, CCSP, CGEIT, PMP, or ISACA Advanced in AI Audit (AAIA)
Education — Minimum: Bachelor's Degree
Education — Field of Study: Management Information Systems; Computer Science; Cybersecurity; Engineering; or related
Years of Experience: 10+
Certifications (Preferred): CISA · CISSP · CISM · CRISC · CCSP · CGEIT · PMP · ISACA Advanced in AI Audit (AAIA)
Skills: IT Audit · Internal Audit · Technology Risk · Cybersecurity · Information Security · IT General Controls (ITGC) · Cloud Security · Identity and Access Management (IAM) · Risk Assessment · Internal Controls · IT Infrastructure · Security Operations · Vulnerability Management · Penetration Testing · Incident Response · Third-Party Risk Mana