FMR

Principal, External Audit Engagement

United States · Work style not stated · Full time

Apply on the employer’s site ↗See how well you match this job

You apply directly with the employer. ROLIVA does not submit applications from this page and is not the employer.

About the role

Description from the employer’s posting. Check the employer’s page for the current version.

EmployerFMR
LocationUnited States
Work styleWork style not stated
Employment typeFull time
Employer posted6 Oct 2026

Fidelity will not provide immigration sponsorship for this position.

Job Description:

The Role

Are you ready to take on a meaningful role at Fidelity Investments, ensuring our cybersecurity controls are second to none? The Fidelity Enterprise Cybersecurity Regulatory and Audit Team is seeking a Principal, External Audit Engagement to play a major role in our engagements with independent third-party audit firms. You will demonstrate adherence to leading industry frameworks, ensuring our control environment is flawless. Success in this role will be showcased through well-managed external audit engagements resulting in unqualified opinions and certifications of Fidelity’s cyber control environment.

The Expertise and Skills You Bring

Proven knowledge of IT risk and cybersecurity functions and their importance to Fidelity’s mission.
Extensive knowledge of audited cybersecurity frameworks and standards, including AICPA’s SOC 1, SOC 2, and SOC 3, PCI-DSS, HITRUST, Swift CSP and ISO/IEC 27000 family.
Experience managing projects end-to-end with a clear ability to communicate progress effectively.
Understanding of NIST Cybersecurity Framework core standards.
Bachelor’s degree in a technology or computer science subject area, or equivalent experience, is preferred.
Minimum 5 years working in IT assurance for a Big 4 or similar audit firm, with experience serving Fortune 500 clients.
Possession of cybersecurity certifications is a plus.
Prior experience in a cybersecurity role, IT audit, or IT risk role.

Show full description

The Team

We, the Cyber Regulatory and Audit Team within Enterprise Cybersecurity’s Information Security Office, are dedicated to knowing the external requirements and standards to which Fidelity is held. We ensure that Fidelity ECS has the appropriate policies and controls aligned to these standards. Our team engages external assessors and examination staff to provide evidence of control, helping to maintain our relentless dedication to our clients.

Fidelity’s Onsite Working Model
Fidelity is transitioning to a full-time onsite working model through a phased rollout across regions and roles. Currently, some roles and locations require 100% onsite presence, while others require less. Onsite expectations are likely to evolve as the rollout continues. This transition does not apply to fully remote roles.

Certifications:

Category:

Information Technology

Please be advised that Fidelity’s business is governed by the provisions of the Securities Exchange Act of 1934, the Investment Advisers Act of 1940, the Investment Company Act of 1940, ERISA, numerous state laws governing securities, investment and retirement-related financial activities and the rules and regulations of numerous self-regulatory organizations, including FINRA, among others. Those laws and regulations may restrict Fidelity from hiring and/or associating with individuals with certain Criminal Histories.

See how well you match this job Apply on the employer’s site ↗

Check your resume against this job Free, no sign-up. Nothing you paste is stored.

Staying safe while you apply

Never pay to apply, interview or accept an offer. ROLIVA never asks you for payment to apply to a job.
Apply only through the official “Apply on the employer’s site” button, on the employer’s own site, and check that a recruiter’s email uses that employer’s own domain rather than a free email address.
Be cautious of an offer made with no real interview, or pressure to decide quickly or share financial details early.

Does something look wrong with this listing? Use “Report broken link” in the role details, or read ROLIVA’s full job-safety guidance ↗.

Preparing for this role with ROLIVA

Check the fit.
Compare the requirements with the experience you have confirmed, including gaps.
Prepare honestly.
Build interview stories and application drafts from your own evidence.
Keep track.
Save the role and record your own application status and follow-ups.

Create a free workspace or log in.