IT Senior Associate, Information Systems Internal Audit

About Us:

We are brand builders who focus our passion and creativity to build Calvin Klein and TOMMY HILFIGER into the most desirable lifestyle brands in the world and at the same time position PVH as one of the best-performing brand groups in our sector. Guided by our values and enabled by our scale and global reach, we are driving fashion forward for good, as one team with one vision and one plan. That’s the Power of Us, that’s the Power of PVH+.

One of PVH’s greatest strengths is our people. Our collective desire is to create a workplace environment where every individual is valued, and every voice is heard, and we are committed to fostering an inclusive and diverse community of associates with a strong sense of belonging.Learn more about Inclusion & Diversity at PVH here.

About the Role

The IT Senior Associate, Information Systems Internal Audit supports independent, objective assurance and advisory services designed to add value and improve PVH’s technology operations, risk management, and control environment. This hybrid role performs risk-based audits and advisory reviews across global technology, information security, infrastructure, applications, data, third-party services, and major technology initiatives.

The Senior Associate helps evaluate whether technology risks are understood and managed, controls are appropriately designed and operating as intended, and projects are implemented with appropriate governance, security, resilience, and operational readiness. The role partners with Internal Audit leadership, IT, Information Security, Finance, Operations, project teams, and external specialists to understand risks, document results, communicate practical recommendations, and support timely remediation.

This position is primarily focused on non-SOX IT audit and advisory work. The role may coordinate with the IT SOX team when technology risks or controls overlap, but it is not the primary owner of IT SOX testing. The ideal candidate is curious, comfortable working across technical and business teams, and able to translate complex technology issues into clear business implications.

What You'll Do:

• Execute assigned risk-based IT audits, operational reviews, and advisory engagements across global technology, information security, infrastructure, applications, data, and service management processes.
• Support engagement planning and risk assessment activities by understanding business objectives, technology dependencies, key risks, and the control environment.
• Perform interviews, walkthroughs, process analysis, control evaluation, data analysis, evidence review, and testing in accordance with PVH methodology and professional standards.
• Evaluate technology governance and operating processes, including policies, procedures, roles and responsibilities, service management, asset and configuration management, architecture, and technology risk reporting.
• Review information security practices, including identity and privileged access, vulnerability and patch management, secure configuration, endpoint and network security, logging and monitoring, incident response, and data protection.
• Assess cloud, infrastructure, application, and data environments, including SaaS platforms, databases, networks, integrations, warehouse management systems, and other enterprise technology platforms.
• Support pre-implementation and post-implementation reviews of major technology initiatives, including cloud migrations, ERP and enterprise application changes, system integrations, data migrations, cutovers, and operational transitions.
• Evaluate project governance, requirements, testing, security, data quality, change readiness, training, support models, resilience, and post-implementation monitoring.
• Review third-party technology and managed service relationships, including vendor governance, service-level expectations, SOC reports, incident management, access, data protection, business continuity, and exit planning.
• Assess disaster recovery, business continuity, backup and restoration, technology resilience, crisis management, and recovery testing practices.
• Support reviews of data governance, privacy-related technology processes, responsible AI, analytics, automation, and other emerging technology risks as assigned.
• Prepare clear audit workpapers, process narratives, risk assessments, testing summaries, issue descriptions, and practical recommendations aligned to PVH methodology and professional standards.
• Identify root causes, control gaps, process inefficiencies, and emerging risks, and communicate their potential business impact to audit management and stakeholders.
• Support remediation monitoring by evaluating management action plans, validating corrective actions, and maintaining status updates for audit findings and recommendations.
• Partner with IT, Information Security, Finance, Operations, project teams, business stakeholders, external auditors, and third-party service providers to support evidence gathering and issue resolution.
• Use data analytics, automation, and other technology-enabled approaches to improve audit coverage, monitor risk indicators, and identify unusual activity or changes in key processes.
• Contribute to annual risk assessments, audit planning, continuous monitoring, and improvements to audit programs, templates, and testing approaches.
• Stay current on technology, cybersecurity, cloud, data, privacy, artificial intelligence, regulatory, and IT audit leading practices, and share relevant insights with the team.
• Demonstrate PVH values by working collaboratively, communicating professionally, and supporting a diverse and inclusive team environment.

What You’ll Bring

• At least three years of experience in IT audit, technology risk, cybersecurity, IT compliance, information security, risk advisory, technology operations, or internal audit. Experience conducting risk-based IT audits, operational reviews, or advisory engagements is preferred.
• Experience in a multinational, retail, apparel, consumer products, or complex technology environment is preferred. Exposure to SAP, SAP S/4HANA, SAP RISE, or other major enterprise platforms is helpful but is not required for this role.
• Bachelor’s degree in Information Systems, Computer Science, Cybersecurity, Accounting, Finance, Audit, or a related field.
• Working knowledge of risk-based IT auditing, technology risk management, and control evaluation concepts.
• Understanding of technology risks across information security, cloud and infrastructure, application development, service management, data, third parties, business continuity, and disaster recovery.
• Ability to evaluate policies, procedures, governance processes, roles and responsibilities, operational performance, and the design and operating effectiveness of controls.
• Ability to assess technology implementations and transformations, including project governance, requirements, testing, data migration, interfaces, cutover, security, and operational readiness.
• Ability to review cybersecurity practices and identify potential gaps within access and privileged access, vulnerability management, security monitoring, incident response, secure configuration, and data protection.
• Ability to analyze data and use technology-enabled audit techniques to identify trends, anomalies, control gaps, and opportunities for improved monitoring.
• Experience leveraging AI-enabled tools such as ChatGPT, Claude, Microsoft Copilot, or similar technologies to improve audit efficiency through automating or streamline testing and documentation with appropriate validation and human oversight.
• Ability to document process narratives, risks, controls, test plans, evidence evaluation, exceptions, root causes, and recommendations with attention to quality and detail.
• Strong analytical thinking, problem solving, and judgment, including the ability to assess business impact and distinguish significant risks from routine operational issues.
• Strong written and verbal communication skills, with the ability to explain complex technology topics to technical and non-technical stakeholders.
• Ability to manage multiple assignments concurrently, meet deadlines, adapt to changing priorities, and communicate status proactively.
• Ability to work effectively with global teams, outsourced resources, external specialists, and stakeholders across multiple regions and time zones.
• Familiarity with AuditBoard or similar audit management and workpaper platforms.
• Knowledge of COBIT, NIST, ISO 27001, ITIL, COSO, or other relevant technology risk and control frameworks preferred.

Certifications

• Certified Information Systems Auditor (CISA) preferred; active progress toward the CISA may be considered.
• Certified Internal Auditor (CIA), Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified in Risk and Information Systems Control (CRISC), ITIL, PMP, or another relevant certification is a plus.

This role is not eligible for work visa sponsorship.

This role requires four days onsite (Mon-Thurs), w flexibility to WFH on Fri.

#LI-BC10

Pay Range:$82,500---$117,100

PVH currently provides base salary ranges for all positions-on job advertisements-in the United States based on local requirements. These ranges are based on what PVH reasonably believes that it will pay an associate for their base salary for said position at the time of the posting. Individual compensation will ultimately be determined based on a variety of relevant factors including but-not limited to qualifications, geographic location and other relevant skills. PVH is committed to providing a market-competitive total rewards package to eligible associates, which includes diverse and robust health and insurance benefits to meet the varied needs of our associates and an above-market 401(k) contribution to help our associates save for retirement. We also offer career growth opportunities, empowering our associates to design their future at PVH.

Additional Compensation: This role is bonus eligible.

Your Wellbeing is Our Priority

At PVH, we offer competitive, cost-effective, and comprehensive benefit packages. We strive to provide options when it comes to your health, finances, and work-life balance. This includes:

• Pay & Insurance: Competitive pay, bonus programs, best in class medical insurance, vision insurance, dental insurance, life insurance, disability insurance, and more.

• 401(k): An above-market 401(k) contribution to help our eligible associates save for retirement.

• Flexible Workplace: Generous company-paid holidays, paid time off, hybrid working arrangements, volunteer opportunities, seasonal hours, and flexible work schedules.

• Wellbeing Support: A variety of wellbeing tools and programs such as, Headspace membership, reimbursement for fitness memberships and/or digital meditation subscriptions, and the opportunity to earn up to $200 a year in rewards for exercising and participating in healthy activities.

• Care.com Services: Access to services for childcare, elder care, adoption preparation, pet care, plus reimbursement for backup care when your regular plans fall through.

• Education Assistance: Receive support for continued education including tuition reimbursement.

• Associate Discount: Shop at our company outlets and e-commerce sites at a discount.

Please note, eligibility depends on employment status, location and length of time employed with PVH and our benefits may be subject to change. Applications will be accepted on a rolling basis until the position is filled.

PVH Corp. or its subsidiary ("PVH") is an equal opportunity employer and considers all applicants for employment on the basis of their individual capabilities and qualifications without regard to race, ethnicity, color, sex, gender identity or expression, age, religion, national origin, citizenship status, sexual orientation, genetic information, physical or mental disability, military status or any other characteristic protected under federal, state or local law. In addition to complying with all applicable laws, PVH is also committed to ensuring that all current and future PVH associates are compensated solely on job-related factors such as skill, ability, educational background, work quality, experience and potential.

To achieve these goals, across the United States and its territories, PVH prohibits any PVH employee, agent or representative from requesting or otherwise considering any job applicant’s current or prior wages, salary or other compensation information in connection with the hiring process. Accordingly, applicants are asked not to disclose this salary history information to PVH.