IT Audit Project Lead

Who We Are

McMaster-Carr is a leading e-commerce company that industrial customers have trusted for over 120 years. Our products help them get manufacturing lines back up quickly keep operations running smoothly and prototype the next generation of innovative solutions. We earn and keep that trust by offering the right products making them easy to find and delivering them fast so customers can solve problems with greater speed precision and ease.

Our industry-leading e-commerce experience indispensable product selection and world-class service bring hundreds of thousands of customers to mcmaster.com each day. But we're never standing still. Curious exceptional people are at the heart of our evolution. They turn new challenges and disruptive technologies into opportunities to refine our operations expand our offering and deliver a better experience for every customer.

What You'll Do

As a member of the IT Audit team you’ll work closely with teams across our Technology organization to learn about our custom systems and assess McMaster‑Carr’s IT security controls. Our internal audit team brings creativity and critical thinking to each project while building strong relationships with technology leaders. While we use leading enterprise security tools the vast majority of the systems that run our business are custom‑built and continuously evolving—requiring auditors to apply security principles and professional judgment rather than relying on standardized checklist‑based assessments. Because of this bespoke environment assessing controls requires a strong foundation in security principles and the curiosity to learn about and assess the company’s practices for meeting its security goals.

As an integral member of our internal audit team you'll play a key role in high-impact work.

• Conduct audits independently from planning through reporting. Communicate findings and recommendations clearly and focus on helping teams strengthen security and operations.  You’ll serve as a risk and controls expert partnering with Technology leaders to assess the effectiveness of IT security controls that protect the business.
• Build trusted partnerships with technology leaders. While you’ll gain exposure to many different teams you'll frequently work with members of the security mainframe and infrastructure teams. By gaining and demonstrating an understanding of their systems and tools you’ll develop trust with the subject matter experts and enable collaboration that makes deep audit work possible.
• Develop deep knowledge of McMaster-Carr's custom-built systems. From McMaster.com to payment processing to internal infrastructure you’ll devise practical test plans to assess how controls protect the business. You'll work directly with subject matter experts to understand which servers handle sensitive data how access is controlled and how encryption is applied at each stage.
• Use critical thinking in the application of security frameworks to our technology environment. Whether assessing our security controls holistically or completing the PCI assessment of credit card data flows we carefully consider our internal context and the intended security goal of the relevant framework to determine whether our processes align with the framework’s guidance.
• Help shape a growing IT audit function by influencing audit topics following curiosity into new areas and connecting insights across engagements.

Who You Are

We are seeking bright curious and ambitious individuals eager to make an impact. Ideal candidates have:

• 5+ years of relevant work experience including at least 3 years in an audit role with recent experience auditing security controls
• A 4-year degree
• A certification in audit or cybersecurity   

• Experience assessing security controls with working knowledge of topics such as firewalls and network segmentation incident response management security configurations logging and monitoring backup and recovery practices and user access management
• The ability to engage quickly with unfamiliar technology environments ask astute questions and apply audit judgment in settings without rigid policies or standard playbooks
• Exceptional communication and analytical skills--able to synthesize technical concepts explain risk clearly and connect ideas across different audits and systems

Benefits

Cash Compensation

Total cash compensation generally ranges from $200000 - $259000 and includes profit sharing based on company performance.

Growth & Learning

• 100% tuition reimbursement
• Informal and formal mentorship
• Employee resource groups

Health & Wellbeing

• Medical dental pharmacy and vision plans with no monthly premiums
• Inclusive all-gender benefits

Family & Future

• Paid parental leave for all new parents
• Adoption and surrogacy assistance
• First-time home buyer assistance
• Industry-leading company-funded retirement accounts

Time Off

• Paid vacation and personal time

What We Do

McMaster-Carr is an e-commerce company offering more than half a million products used to keep business in motion. With more than 300000 daily visits to our website customers from a variety of industries turn to us when they need to build design repair or maintain just about anything because we are the complete one-stop source for industrial supplies. Technology teams play a vital role in McMaster-Carr’s success. The software that drives our business is developed in-house by a growing team of versatile engineers. Whether the project is automating distribution operations improving browsing features on our app or integrating a new data center to serve five national facilities people flourish when they love to learn and pursue ambitious goals. McMaster-Carr’s diverse business creates the opportunity to explore new technologies and develop expertise that is both broad and deep. Growth is supported by an inclusive culture of development seen in mentorship reading groups guilds and town halls that create community. They pursue career growth through learning and advancement in technical and project leadership.

Why Work With Us

Curious people thrive at McMaster-Carr. Engineers build technical knowledge through learning groups book clubs and one-on-one mentoring. Diverse projects offer experience with a wide range of technologies to encourage career-long learning. Great work is celebrated in an inclusive workplace dedicated to equity growth and employee well-being.

Gallery