Principal, External Audit Engagement

Responsibilities

• Ensure our cybersecurity controls are second to none
• Play a major role in our engagements with independent third-party audit firms
• Demonstrate adherence to leading industry frameworks, ensuring our control environment is flawless
• Showcase success through well-managed external audit engagements resulting in unqualified opinions and certifications of Fidelity’s cyber control environment

• Proven knowledge of IT risk and cybersecurity functions and their importance to Fidelity’s mission
• Extensive knowledge of audited cybersecurity frameworks and standards, including AICPA’s SOC 1, SOC 2, and SOC 3, PCI‑DSS, HITRUST, Swift CSP and ISO/IEC 27000 family
• Experience managing projects end‑to‑end with a clear ability to communicate progress effectively
• Understanding of NIST Cybersecurity Framework core standards
• Bachelor’s degree in a technology or computer science subject area, or equivalent experience, is preferred
• Minimum 5 years working in IT assurance for a Big 4 or similar audit firm, with experience serving Fortune 500 clients
• Possession of cybersecurity certifications is a plus
• Prior experience in a cybersecurity role, IT audit, or IT risk role

Demonstrates extensive knowledge of IT risk and cybersecurity functions, with proven experience in managing external audit engagements and adherence to industry frameworks. Possesses strong communication skills to effectively convey project progress and ensure compliance with cybersecurity standards.