Senior IT Auditor & Issues Management

GENERAL SUMMARY

The Senior IT Auditor & Issues Management will perform an important role in evaluating and reviewing Issues and leading and performing Financial, Operational, Compliance, IT Audits and various value-add projects under the direction of internal audit management. The Senior IT Auditor & Issues Management will be responsible for assisting Internal Audit management with project planning, execution, and reporting.

ESSENTIAL FUNCTIONS

• Validate issues by evaluating effectiveness and sustainability of remediation of issues.
• Review and provide feedback on new issues with audit teams as they are being developed.
• Review and provide feedback on issue closure package submissions with lines of business.
• Escalate to management risks to remediation timelines.
• Support management by generating various metrics reports for senior management and board level committees.
• Identify potential risk, including awareness of risks both within span of control as well as enterprise wide.
• Report results in an effective and timely basis, leading to appropriate remedial action and ongoing management of risk.
• Under the direction of IT Audit management, lead the planning, testing and reporting for IT Applications, IT Integrated, and IT SOX audits in accordance with professional and department standards.
• Lead the audit process from start to finish, including planning and audit execution according to a risk-based approach, recommending internal control improvements (including operational enhancements or efficiencies) and preparing audit reports. 
• Effectively manage audit budget and deadlines.  Provide updates to management on progress.
• Demonstrate experience in IT application controls, business process control reviews, systems development / project reviews and IT general computer controls.
• Review work performed by other team members where applicable and provide guidance to ensure conclusions are properly supported and work product meets department guidelines.
• Ensure assignments are completed within established time frames and that delays/issues/concerns are communicated to Internal Audit management on a timely basis.
• Partner with process owners to promote and support a culture of continuous process improvement and efficiency driving toward standardized practices.
• Stay abreast of audit and accounting standards and emerging issues in the areas applicable to the company.
• Obtain and maintain a general understanding of business activities, objectives, applicable laws, regulations, and associated risks to the company and industry. 
• Responsible for developing the audit staff by performing effective work paper review, preparing constructive interim and annual performance evaluations and providing training opportunities.  
• May participate in various key management committees, acting in an advisory capacity.
• Identify opportunities for, and participate in approved special projects, investigations or other significant business issues.
  
  • Familiarity with one or more of the following areas is highly desirable:
    IP networks infrastructure (network topology, switches, routers, firewalls, intrusion detection / prevention)
  • Windows active directory (policies, structure, elements)
  • Databases (SQL, Oracle, DB2, monitoring tools)
  • Mobile technologies (data leakage prevention, BYOD security)
  • Cloud Computing
  • Standards / Frameworks (CoBIT 5, ITIL, ISO 15504, ISO 20000, ISO 27000, ISO 31000, ISO 38500, NIST series 800 guidance) 
• Knowledge and understanding of Information Technology operating systems including mainframe, MS Windows, UNIX, and Linux.

QUALIFICATIONS

Education:    

• Bachelor’s degree in Accounting, Finance or related field is required

Experience:  

• At least 5 years related work experience, including at least 2 years of internal or external audit supervisory experience in a Bank or Financial Services industry required.

Skills/Ability: 

• Ability to work independently and with others.
• Knowledgeable about the financial industry and related markets, related regulatory bodies, and current industry events and trends. 
• Deep understanding of risk assessment, audit methodology, and IT audit execution.
• Strong time management and organizational skills including the ability to manage multiple projects and competing priorities.
• Ability to exercise sound judgment in the execution of assignments and communication with others.
• Excellent verbal and written communication skills; interpersonal and presentation skills – ability to work closely and collaboratively with people at all levels in the department and within the organization.
• Strong analytical thinker and detail oriented with the ability to proactively identify issues and assist in resolution.
• Excellent computer skills, Proficient in Microsoft Office Products (i.e. Excel, PowerPoint, Word, etc.).

CERTIFICATIONS:

• CISA, CIA, CISM, CISSP or other relevant professional certification highly desirable.
• Additional qualifications, such as CFE, CAMS also preferred.

OTHER DETAILS

$90K – $110K / year
Pay determined based on job-related knowledge, skills, experience, and location.