Senior Cyber Security Auditor

Job Description

About Ahold Delhaize

Ahold Delhaize is one of the world's largest food retail groups, with more than 402,000 associates serving over 63 million customers each week through a portfolio of strong, trusted local brands. Through our market-leading retail and e-commerce capabilities, combined with a strong focus on innovation, we are continuously transforming how customers shop and how we operate.

Technology, data, automation, and digital platforms are at the heart of this transformation. As a Senior Cyber Security Auditor, you will play a key role in providing independent assurance over the security, resilience, and effectiveness of these capabilities, helping to safeguard our operations, support innovation, and enable the achievement of strategic business objectives.

Make a meaningful impact at scale

Are you an experienced cyber security professional who enjoys understanding complex technology environments, challenging the status quo, and helping organizations strengthen their cyber resilience? Ahold Delhaize is looking for a Senior Cyber Security Auditor to join our Internal Audit team.

In this role, you will work across one of the largest food retail organizations in the United States, providing independent assurance and trusted advisory services on a broad range of cyber security, technology, data, and digital initiatives. You will collaborate with business and technology leaders, evaluate the effectiveness of cyber security controls, and help strengthen the organization's ability to manage emerging risks in an increasingly digital landscape.

This is a unique opportunity to gain exposure to leading technologies, large-scale retail operations, and strategic business initiatives while working in a highly visible role with senior stakeholders across the organization.

Internal Audit

Internal Audit at Ahold Delhaize is a forward-looking function that focuses on helping the organization navigate risk while supporting strategic objectives. Rather than solely assessing compliance, we provide insights that help improve business performance, strengthen controls, and enable sustainable growth.

Our teams assess risks and controls across business processes, technology platforms, cyber security programs, digital initiatives, data platforms, supply chain operations, and customer-facing solutions. We combine business knowledge, technical expertise, and data-driven insights to deliver meaningful assurance and practical recommendations.

As a Senior Cyber Security Auditor, you will work independently while partnering closely with stakeholders across technology, cyber security, and business functions. You will be expected to exercise sound professional judgment, challenge constructively, and deliver high-quality insights that drive real improvements.

What You'll Be Doing

As a Senior Cyber Security Auditor, you will lead and execute cyber security and technology audits across Ahold Delhaize USA. You will evaluate the effectiveness of risk management practices and controls across a wide variety of technology platforms, processes, and business functions.

Your work may include reviews of:

\n
• Cyber security governance, operating models, and risk management processes
\n
• Identity and Access Management (IAM) and Privileged Access Management (PAM)
\n
• Cloud security, particularly Azure-based environments
\n
• Network security and segmentation
\n
• Security operations, incident response, and threat detection capabilities
\n
• Vulnerability, patch, and configuration management processes
\n
• Application and DevSecOps security practices
\n
• Third-party and supply chain security
\n
• Data protection and privacy controls
\n
• Technology supporting stores, distribution centers, warehouses, and e-commerce platforms
\n
• Emerging technologies, including automation and artificial intelligence
\n

You will be responsible for:

\n
• Leading risk assessments, audit planning, fieldwork, reporting, and follow-up activities
\n
• Evaluating the design and operating effectiveness of cyber security controls
\n
• Translating technical observations into clear business risks and actionable recommendations
\n
• Presenting findings and recommendations to management and senior stakeholders
\n
• Coaching and supporting team members during audit engagements
\n
• Building strong relationships with cyber security, technology, and business leaders
\n
• Identifying emerging risks and opportunities to enhance audit coverage and value delivery
\n

Every audit presents a different challenge, technology stack, stakeholder group, and business objective, providing continuous learning opportunities and exposure to a broad range of cyber security topics.

What We're Looking For

We are looking for an intellectually curious and highly motivated professional with strong cyber security knowledge, excellent communication skills, and the ability to combine technical depth with business insight.

You are comfortable challenging assumptions, navigating ambiguity, and building credibility with both technical and non-technical stakeholders. You understand that effective cyber security is not only about technology, but also about people, processes, and business objectives.

Preferred Qualifications

\n
• Bachelor's or Master's degree in Cyber Security, Computer Science, Information Systems, Information Technology, or a related field
\n
• 5+ years of experience in cyber security, IT audit, risk assessment, security consulting, or a similar role
\n
• Professional certifications such as CISSP, OSCP, AZ-500, or equivalent
\n
• Experience independently assessing the effectiveness of cyber security and technology controls
\n
• Experience leading complex cyber security or IT audit engagements from planning through reporting
\n
• Ability to communicate technical concepts clearly to executive and business stakeholders
\n
• Strong analytical, project management, and problem-solving skills
\n
• Ability to travel within the United States up to 10-20%
\n
• Ability to communicate technical concepts clearly to executive and business stakeholders
\n
• Strong analytical, project management, and problem-solving skills
\n
• Ability to travel within the United States up to 10-20%
\n

Strong understanding of cyber security frameworks and standards, including:

\n
• NIST Cybersecurity Framework (CSF)
\n
• ISO 27001
\n
• CIS Critical Security Controls
\n
• PCI DSS
\n

Experience assessing:

\n
• Cloud security, preferably Microsoft Azure
\n
• Identity and access management
\n
• Network architecture and security controls
\n
• Security operations and incident response
\n
• Vulnerability and configuration management
\n
• Application security and DevSecOps practices
\n
• Third-party security risk management
\n

What We Offer

In addition to a competitive compensation package, we offer:

\n
• Competitive salary and performance-based incentives
\n
• Comprehensive benefits package
\n
• Flexible work arrangements and a collaborative work environment
\n
• Opportunities for professional growth, development, and certification support
\n
• Access to international career opportunities across Ahold Delhaize brands
\n
• Exposure to senior leadership and strategic business initiatives
\n
• The opportunity to influence meaningful change across a global retail organization
\n
• An inclusive culture that values collaboration, integrity, courage, and continuous improvement
\n

If you are looking for a role that combines cyber security expertise, business impact, continuous learning, and meaningful stakeholder engagement, we would love to hear from you!

Our flexible hybrid work schedule includes three in-person days at one of our core locations and two remote days. Our core office locations for this role includes Salisbury, NC, Carlisle, PA, Quincy, MA.

Applicants must be currently authorized to work in the United States on a full-time basis.

NC/PA Salary Range: $108,880-$163,320

MA Salary Range: $125,200-$187,800

Actual compensation offered to a candidate may vary based on their unique qualifications and experience, internal equity, and market conditions. Final compensation decisions will be made in accordance with company policies and applicable laws.