Job Description Summary:
The Coca-Cola Company is seeking a highly motivated Information Technology Auditor with deep cybersecurity expertise to join the Internal Audit Team. This role serves as a Cybersecurity Subject Matter Expert (SME) performing technology-focused risk assessments across cybersecurity, penetration testing, digital platforms, cloud environments, industrial control systems, and data privacy.
The position partners closely with IT and security leadership to evaluate cyber risk, control effectiveness, and regulatory compliance, including Sarbanes-Oxley (SOX) related technology controls, Audit and advisory activities are conducted for internal clients at our headquarters in Atlanta, GA and at locations around the world.
What You’ll Do for Us:
- Act as a cybersecurity SME within Internal Audit, contributing specialized knowledge.
- Create plan for upcoming audits through a contribution of ideas on the methodology and approach for upcoming assignments based on review of prior year’s audit work papers, flowcharts, and audit reports.
- Perform interviews with process and business owners at all levels and across the company to gather information, ascertain key risks, areas of concerns, and the expected internal control that should be in place. Independently execute pre-designed audit tests and assess the adequacy and effectiveness of the business areas processes, policies, or controls. Identify gaps/opportunities/key risks and develop corrective actions to address gaps or assess adequacy of solutions offered by business partners.
- Perform comprehensive analysis of information prompted through interviews and document review by demonstrating professional skepticism and appropriate follow-up.
- Present and confirm audit findings/issues and the related corrective action to various levels of process/business owners.
- Document assessment and test result in compliance with internal audit industry (i.e., Institute of Internal Auditors) and departmental standards. Accurately prepare written audit finding/issue and applying judgment and analysis to recommend the related corrective action.
- Effective in writing reports; highlighting audit findings and making recommendations for corrective action.
Position Details:
Location: Atlanta, Georgia
Travel 30% domestic and international
Individual contributor role - no direct reports
Applicants must be authorized to work for any employer in the US. Please note that The Coca-Cola Company is unable to sponsor or assume sponsorship of a candidate’s employment visa for this position.
Qualifications & Requirements:
- Bachelor's degree in Cybersecurity, Information Assurance, Computer Science, Information Technology, or related field.
- Three (3) – four (4) years' experience in cybersecurity, IT audit, security engineering, or public accounting with a strong technology focus.
- A CISA, CISSP, or CISM certification or relevant cybersecurity certifications (e.g., CHE, OSCP) is preferred.
- A strong knowledge of risk based advanced IT and cybersecurity auditing in a dynamic and changing environment applying appropriate IT control frameworks (e.g., COBIT, PCI, NIST) to evaluate areas of risk is required.
- Experience working with technologies such as SAP ECC/Hana, SAP GRC, Active Directory, RedHat Linux, Windows, Oracle Database, MS SQL Server, Amazon Web Services, Azure Cloud Services, Microsoft 365, Palo Alto Networks, Industrial Control Systems, network devices, etc.
- Should demonstrate sound technical proficiency and the curiosity, willingness, and ability to learn advanced IT environments.
- Must have a solid awareness of General IT controls and activities. This includes strong knowledge across a breadth of IT processes including, but not limited to, security operations, program management, security administration, system operations, change management, modern development (e.g., DevOps, Agile), data governance, privacy, and incident/problem management.
- Must have above average mathematical skills, including the ability to compute rates, ratios, and percentages, and the ability to work with mathematical concepts such as probability and statistical inference.
- Ability to work a flexible schedule based on department and company needs.
- Available to travel (domestic and international) up to 30%. Extended international travel may be required.
- Progression and rotation into other roles within the Company must be desired by all applicants
Other Skills
- This position requires analytic and problem-solving ability to review and evaluate an operation’s overall control environment.
- In addition, it requires the ability to demonstrate good judgment, professional skepticism, and a strong learning aptitude to understand the Company’s business processes as well as the ability to work with minimal supervision and demonstrate a high level of drive and initiative.
- The candidate must be able to effectively communicate with various levels of the Company, discuss appropriate risks, identify, and obtain audit requests from clients, and present audit findings in a clear and professional manner.
What We Can Do for You:
- Commitment to Diversity: We are paving the way to create change in the industry and our leadership is committed to diversity, inclusion and belonging.
- Global Network: Expand your global network by developing, learning, and growing with our top talent and connections around the world.
- Agile Work Environment: We embrace agile, with leadership that believes in removing barriers, so you are empowered to innovate and discover new solutions to complex problems.
The Coca-Cola Company will not offer sponsorship for employment status (including, but not limited to, H1-B visa status and other employment-based nonimmigrant visas) for this position. Accordingly, all applicants must be currently authorized to work in the United States on a full-time basis and must not require The Coca-Cola Company's sponsorship to continue to work legally in the United States.
Skills:
Artificial Intelligence (AI), Artificial Intelligence Technologies, Cloud Security, Cyber Risks, Cybersecurity, Cybersecurity Assessment, Cyber Threat Prevention, Information Systems, Information Technology Auditing, Infrastructure Administration, Internal Controls, Kali Linux, Microsoft Dynamics 365 ERP, Network Security, SAP Systems, Sarbanes-Oxley Act (SOX)
Pay Range:
United States of America: 124,600 USD - 148,200 USD
Base pay offered may vary depending on geography, job-related knowledge, skills, and experience. A full range of medical, financial, and/or other benefits, dependent on the position, is offered.
Annual Incentive Reference Value Percentage:
15
Annual Incentive reference value is a market-based competitive value for your role. It falls in the middle of the range for your role, indicating performance at target.
Location(s):
United States of America
City/Cities:
Atlanta
Travel Required:
26% - 50%
Relocation Provided:
No
Job Posting End Date:
July 17, 2026
Our Purpose and Growth Culture:
We are taking deliberate action to nurture an inclusive culture that is grounded in our company purpose, to refresh the world and make a difference. We act with a growth mindset, take an expansive approach to what’s possible and believe in continuous learning to improve our business and ourselves. We focus on four key behaviors – curious, empowered, inclusive and agile – and value how we work as much as what we achieve. We believe that our culture is one of the reasons our company continues to thrive after 130+ years. Visit Our Purpose and Vision to learn more about these behaviors and how you can bring them to life in your next role at Coca-Cola.
We are an Equal Opportunity Employer and do not discriminate against any employee or applicant for employment because of race, color, sex, age, national origin, religion, sexual orientation, gender identity and/or expression, status as a veteran, and basis of disability or any other federal, state or local protected class. When we collect your personal information as part of a job application or offer of employment, we do so in accordance with industry standards and best practices and in compliance with applicable privacy laws.
