Cdi - it internal auditor f/h

At STMicroelectronics, we believe in the power of technology to drive innovation and make a positive impact on people, businesses, and society. As a global semiconductor company, our advanced technologies and chips form the hidden foundation of the world we live in today.

When you join ST, you will be part of a global business with more than 115 nationalities, present in 40 countries, and comprising over 50,000 diverse and dedicated creators and makers of technology around the world.

Developing technologies takes more than talent: it takes amazing people who understand collaboration and respect. People with passion and the desire to disrupt the status quo, drive innovation, and unlock their own potential.

Embark on a journey with us, where you can innovate for a future that we want to make smarter and greener, in a responsible and sustainable way. Our technology starts with you.

ABOUT YOUR MISSION

Corporate Audit is an independent organization designed to provide objective assurance and consulting activity which adds value, improves ST operations at all levels, and evaluates and promotes compliance with ST Standard Operating Procedures (SOPs) and Policies. Furthermore, it helps ST accomplish its objectives by bringing a systematic, disciplined approach to evaluate and improve the effectiveness of risk management, control, and governance processes. Corporate Audit is a key component of ST’s governance framework and assists the Audit Committee of the Supervisory Board and the company’s certifying officers in their fiduciary duties.

YOUR ROLE & RESPONSABILITIES

A member of the worldwide Corporate Audit – IT Assurance team. Identifies and assesses IT-related risk areas and provides advice to assist Management in the improvement of risk management practices and internal controls to foster and facilitate the achievement of the company objectives.

Job responsibilities:

• According to company policies, rules, and guidelines, conduct assigned IT-related audit and advisory services based on the yearly audit plan defined by Management. These activities include:
• planning, including for example, the definition of the scope, the identification of relevant organizations and people, and the preparation of a risk and control matrix based on The IIA standards and internal guidelines
• executing fieldwork, including – but not limited to – the collection, analysis and preservation of relevant evidence, conducting and documenting meetings with stakeholders
• discussing preliminary findings and results with auditees and related management
• preparing the audit or advisory report
• following up on the timely and adequate implementation of recommended actions
• Carry out assigned IT-related SOX testing activities according to company processes and practices.
• Contribute to the improvement and development of best practices for the Corporate Audit function.

YOUR SKILLS & EXPERIENCES

Master’s degree in computer science or information technology engineering. A master’s degree in accounting, finance, economics, or business administration may also be considered.

Preferred certifications: CISA, CRISC, CCNA, CCSP, CEH, CISSP, and CIA. Other IT-related certifications are welcome.

5+ years of relevant IT-related audit experience, ideally with combined experience in external audit (Big 4 preferred) and in the industrial sector as internal auditor or in Information Technology (IT) functions.

Fluency in English both oral and written is mandatory. French or Italian is a plus.

Communication skills.

Ability to build and promote strong relationships within the Corporate Audit group and with colleagues from other organizations.

Ability to work in multicultural environment and with an open-minded attitude.

Writing skills.

Problem-solving skills, analytical skills, and an eye for detail.

Availability for frequent travel, approximately three to five days per month.

Advanced use of Microsoft Excel and extensive knowledge of other applications in the Microsoft Office suite, for example Word, Outlook, and PowerPoint.

Candidates with exposure to the following are preferred:

• Risk assessment and management
• COBIT®, CMMI®, ITIL®, TOGAF®, ISO/IEC 27001, and ISO 19011.
• Semiconductor or Hi-Tech manufacturing industry with multi-sites operations.
• Sarbanes-Oxley (SOX) SECT 404 testing.
• Artificial intelligence, information security, and cybersecurity.
• Networking, software development engineering, and IT operations.
• Security and authorizations in SAP ECC and SAP S4/HANA.
• Project management (waterfall, agile, iterative, and others)
• Business process modeling

ST is proud to be one of the 17 companies certified as a 2025 Global Top Employer and the first and only semiconductor company to achieve this distinction. ST was recognized in this ranking thanks to its continuous improvement approach and stands out particularly in the areas of ethics & integrity, purpose & values, organization & change, business strategy, and performance.

At ST, we endeavor to foster a diverse and inclusive workplace, and we do not tolerate discrimination. We aim to recruit and retain a diverse workforce that reflects the societies around us. We strive for equity in career development, career opportunities, and equal remuneration. We encourage candidates who may not meet every single requirement to apply, as we appreciate diverse perspectives and provide opportunities for growth and learning. Diversity, equity, and inclusion (DEI) is woven into our company culture.

To discover more, visit st.com/careers.