Specialist, Corporate Audit

How You'll Help Us Keep Climbing

At Delta Air Lines, connection is at the heart of everything we do and guides our every action. We strive to welcome and care for all of our customers during their travels with us and aim to deliver an elevated experience.

Key Responsibilities

• Participate in IT audit projects from planning through reporting and remediation validation
• Perform risk assessments of technology processes, applications, infrastructure, cloud environments, and information security programs
• Absess compliance with internal policies, regulatory requirements, and industry frameworks such as NIST Cybersecurity Framework (CSF), ISO 27001, COBIT, CIS Controls, SOX IT Controls, and SOC reporting requirements
• Assist in developing audit scopes, risk-based testing strategies, control objectives, and audit programs
• Execute control testing, collect and analyze evidence, document results, and identify control gaps and risk exposures
• Develop documentation including process flows, data flows, risk and control matrices, narratives, and supporting workpapers
• Partner with Information Security, Technology, Compliance, Privacy, and business stakeholders to understand risks and evaluate remediation strategies
• Monitor and validate corrective action plans to ensure timely and effective risk mitigation
• Leverage data analytics and reporting tools to identify trends, anomalies, and emerging risks
• Prepare clear and concise reports, presentations, and recommendations for management and senior leadership

What You Need To Succeed

• 2–4 years of experience in IT Audit, Information Security, Risk Management, Compliance, Internal Audit, Technology Operations, Cybersecurity, or related fields
• Ability to travel (up to 10% annually)
• Ability to manage competing priorities in a dynamic, fast-paced, results-oriented environment
• Experience assessing risks, documenting controls, or supporting audit and compliance activities
• Exceptional written and verbal communication skills with the ability to translate technical concepts into business terms
• Strong analytical, problem-solving, and critical-thinking skills
• Knowledge of IT control environments, information security concepts, and risk management principles
• Consistently prioritizes safety and security of self, others, and personal data
• Embraces diverse people, thinking, and styles
• Possesses a high school diploma, GED, or high school equivalency
• Is at least 18 years of age and has authorization to work in the United States

What Will Give You a Competitive Edge

• Bachelor's degree in Information Systems, Cybersecurity, Computer Science, Information Technology, Accounting, Finance, Business Administration, Engineering, or a related field
• Professional certifications such as CISA, CRISC, CISSP, CIA, CISM, CPA, Security+, or other relevant certifications
• Experience performing IT audits, cybersecurity assessments, SOX IT testing, risk assessments, controls assurance reviews, or compliance evaluations
• Familiarity with industry frameworks and standards including NIST CSF, ISO 27001, COBIT, CIS Controls, PCI-DSS, SOC 1/SOC 2, and SOX
• Experience evaluating cloud environments (AWS, Azure, GCP), identity and access management controls, privileged access management, vulnerability management, or security operations processes
• Knowledge of governance, risk, and compliance platforms and audit management tools
• Experience utilizing data analytics and visualization tools such as Power BI, Tableau, Alteryx, or similar technologies
• Understanding of third-party risk management, vendor assessments, and technology governance practices

Benefits And Perks

• Competitive salary, industry-leading profit sharing program, and performance incentives
• 401(k) with generous company contributions up to 9%
• New hires are eligible for up to 2-weeks of vacation
• This is earned for use in the following vacation year (April 1 – March 31)
• In addition to vacation, new hires are eligible for up to 56 hours of paid personal time within a 12-month period
• 10 paid holidays per calendar year
• Birthing parents are eligible for 12-weeks of paid maternity/parental leave
• Non-birthing parents are eligible for 2-weeks of paid parental leave
• Comprehensive health benefits including medical, dental, vision, short/long term disability and life insurance benefits
• Family care assistance through fertility support, surrogacy and adoption assistance, lactation support, subsidized back-up care, and programs that help with loved ones in all stages
• Holistic Wellbeing programs to support physical, emotional, social, and financial health, including access to an employee assistance program offering support for you and anyone in your household, free financial coaching, and extensive resources supporting mental health
• Domestic and International space-available flight privileges for employees and eligible family members
• Career development programs to achieve your long-term career goals
• World-wide partnerships to engage in community service and innovative goals created to focus on sustainability and reducing our carbon footprint
• Business Resource Groups created to connect employees with common interests to promote inclusion, provide perspective and help implement strategies
• Recognition rewards and awards through the platform Unstoppable Together
• Access to over 500 discounts, specialty savings and voluntary benefits through Deltaperks such as car and hotel rentals and auto, home, and pet insurance, legal services, and childcare