Sr. IT Internal Auditor

Our INTERNAL AUDIT team provides PetSmart a value-add service to improve the effectiveness and efficiency of management processes, internal controls, risk management, and governance processes.  We also provide advice and counsel concerning new systems, initiatives, and services under development from an internal control, information security, and data integrity perspective.

Collaborative Work Environment:
At PetSmart, teamwork and connection are core to how we thrive. This role is based at our Phoenix Home Office, with an expectation of working a minimum of four days in the office each week. In a standard work week, associates may work up to one remote “flex day” (with leader approval). Our hybrid approach is designed to foster strong collaboration while also supporting flexibility and individual success.

This role will work in our Phoenix Home Office - Visa sponsorship is not available for this role

Position Summary

PetSmart's Internal Audit team is seeking an experienced and motivated Senior IT Internal Auditor to support the execution of the Company's risk-based internal audit and Sarbanes-Oxley (SOX) compliance activities.

This role serves as a key member of a small, collaborative IT audit team responsible for evaluating technology risks and controls across a dynamic retail environment. The Senior IT Internal Auditor will independently execute IT audit, SOX, operational, and integrated audit activities while partnering with business and technology stakeholders to identify risks, assess control effectiveness, and provide practical recommendations that strengthen governance, security, compliance, and operational performance.

The ideal candidate is intellectually curious, self-motivated, and comfortable working independently across a broad range of technology, cybersecurity, and business processes. This position offers significant exposure to enterprise applications, cybersecurity, infrastructure, cloud technologies, retail systems, and strategic business initiatives.

Responsibilities Include (but are not limited to)

• Independently execute audit engagements from planning through reporting, including risk assessment, process walkthroughs, testing, issue evaluation, and communication of results.
• Perform testing of IT general controls (ITGCs), application controls, automated controls, interfaces, key reports, and other technology controls supporting SOX compliance and business operations.
• Participate in annual SOX planning and execution activities, including walkthroughs, testing, deficiency evaluation, and coordination with external auditors.
• Execute IT, cybersecurity, operational, and integrated audit procedures designed to evaluate the effectiveness of risk management, governance, and internal controls.
• Partner with Financial and Operational Audit team members to assess technology dependencies and related risks supporting key business processes.
• Evaluate risks and controls related to identity and access management, change management, computer operations, cybersecurity, vulnerability management, cloud services, system implementations, third-party technology providers, and emerging technologies.
• Utilize data analytics, automation, and technology-enabled testing techniques to improve audit effectiveness, efficiency, and insight generation.
• Prepare clear, concise, and well-supported audit documentation in accordance with departmental methodology and professional standards.
• Identify control deficiencies and process improvement opportunities and develop practical, risk-based recommendations.
• Communicate audit observations and recommendations effectively to management and business stakeholders.
• Develop productive working relationships with business and technology teams across the organization.
• Support investigations, special projects, enterprise initiatives, and management requests as assigned.
• Maintain awareness of emerging technology risks, cybersecurity developments, regulatory changes, and internal audit leading practices.
• Occasional travel may be required based on audit activities, special projects, or business needs.

Education / Experience

• Bachelor's degree in Information Systems, Information Technology, Accounting, Finance, Business Administration, Cybersecurity, or a related field.
• Approximately 4–7 years of experience in IT audit, information security, public accounting, risk management, compliance, or related disciplines.
• Experience independently executing audit, compliance, or risk assessment activities.
• Strong understanding of internal controls, risk management principles, and audit methodologies.
• Experience evaluating and testing IT general controls, application controls, automated controls, and technology-enabled business processes.
• Familiarity with professional frameworks and guidance including COSO, COBIT, NIST Cybersecurity Framework, ITIL, or similar standards.
• Working knowledge of technology risks and controls across enterprise applications, infrastructure, cybersecurity, cloud services, and third-party technology environments.
• Experience with ERP environments (SAP preferred), databases, operating systems, cloud technologies, and system integrations.
• Experience using audit analytics and GRC tools such as Optro (AuditBoard), Alteryx, SQL, Power BI, Tableau, or similar platforms preferred.
• Professional certification such as CISA, CISSP, CIA, CPA, CISM, or equivalent preferred; progress toward certification is encouraged.
• Strong analytical, organizational, and problem-solving skills.
• Ability to manage multiple priorities and work independently in a fast-paced environment.
• Excellent written and verbal communication skills, including the ability to explain technical concepts and audit results to both technical and non-technical audiences.

Key Competencies

• Critical thinking and analytical problem solving
• Professional skepticism and sound judgment
• Intellectual curiosity and continuous learning
• Business partnership and relationship building
• Written and verbal communication
• Organization and project management
• Adaptability and initiative
• Integrity and objectivity

Qualifications may warrant placement at a different job level.

• This role requires collaboration, teamwork, and face-to-face interaction with colleagues, leaders, and/or clients.
• Being in the office ensures access to leaders, cross-functional partners, and resources necessary to make timely decisions and drive results.
• On-site presence in accordance with our FlexSmart policy supports our culture of innovation, mentorship, and engagement, which is integral to our success in developing the best team.

* This is not intended to be an all-inclusive, exhaustive list of all essential job functions for this position. PetSmart retains the right to change or assign other required job duties to this position.

Our associates are the heart of Team PetSmart. Together, we’re building the best team in retail through our values-based culture, connection, and teamwork. Our goal is to create a culture where associates learn and grow together, thrive as effective teams and challenge each other to be the best they can be.

Our home office offers outstanding amenities in a fun and rewarding workplace including:

• Pet-friendly environment, bring your pets to work and enjoy the on-site dog park!
• On-Site Events & Adoptions, enjoy community-building opportunities, including pet adoption days, seasonal celebrations, family events, art events, & holiday festivals
• “Top Dog” gym with equipment, fitness classes, massage therapists, personal trainers, and wellness spaces
• “Sit & Stay” Café serving fresh breakfast and lunch options, snacks, & more
• “Lil Paws” NAEYC-accredited onsite childcare facility providing high-quality early education
• Paid Volunteer Opportunities to spend time doing good for causes close to heart
• Print Center and Business Services, Dry Cleaning, Mother's Rooms, Sustainable Infrastructure & more

PetSmart provides an equal opportunity for all associates and job applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status or other legally protected characteristics.