Key Responsibilities- Conduct technology infrastructure and integrated audits
- Participate as both audit team member and audit lead, as appropriate
- Executing and reporting on the adequacy and effectiveness of technology controls across all risk areas
- Delivering against multiple and often concurrent audit projects, managing conflicting priorities to achieve results on time
- Planning, determining scope areas, drafting risk and control matrix and test procedures for technology and cybersecurity audits
- Executing and reporting on technical controls through continuous auditing and monitoring
- Documenting issues and findings, ensuring alignment with corporate policies and procedures and regulatory standards
- Utilizing automated audit tools as an integral part of audit planning and execution.
- Participate in business/operations & regulatory audits, project reviews, and work in audits of business processes to identify and evaluate key IT operational risks and controls.
- Clearly convey technical findings to both technical and non-technical audiences
Required Qualifications - 2-6 years of risk-focused technology internal audit or related experience (i.e. cybersecurity and infrastructure audits)
- Experience in risk based audits of IT processes & governance, IT infrastructure (networks database, operating system, server configuration, virtualization platforms, container technologies such as Docker and Kubernetes, logging and monitoring solutions, IaC, cloud native services).
- Experience in auditing data centers and Cloud (AWS and Azure)
- Understanding technology risk management principles and standards like COBIT
- Demonstrated ability to write audit reports with minimal supervision and guidelines
- Strong team player, approachable, collaborative
- Excellent organizational, project management and communication skills
- Experience with audit tools such as TeamMate
Nice-to-Have - Fluent English language skills and a strong customer service mindset
- Experience working with Global Teams
- Bachelor's degree in Information Systems, Cybersecurity, Computer Science, or a related field.
- Professional auditing certifications preferred: CISA (Certified Information Systems Auditor) or CISSP (Certified Information Systems Security Professional.
This position will be located in New York City and offers the opportunity for a hybrid work environment at least 3 days a week in-office, subject to change, providing flexibility and accessibility for qualified candidates. What We OfferWe're proud to offer a competitive rewards package that is meaningful, recognizes the unique needs of our employees and their families and incentivizes employees for their contribution to Nasdaq's overall success.
The base pay range for this role is $71,000 - $121,000. In addition to base salary, Nasdaq provides a generous annual bonus/commission (short-term incentive), and equity (long-term incentive), comprehensive benefits, and opportunity for growth. Exact compensation may vary based on several job-related factors that are unique to each candidate, including but not limited to: skill set, experience, education/training, business needs and market demands.
Nasdaq's programs and rewards are intended to allow our employees to:
- Secure Wealth: 401(k) program with 6% employer match, Employee Stock Purchase Program with 15% discount, Student loan repayment program up to $10k, Company paid life and disability plans, Generous paid time off
- Prioritize Health: Comprehensive medical, dental and vision coverage, Health spending account with employer contribution, Paid flex days to support mental wellbeing, Gym membership discounts
- Care for Family: Hybrid home/office schedule (for most positions), Paid parental leave, Fertility benefits, Paid bereavement leave
- Connect with Community: Company gift matching program, Employee resource groups, Paid volunteer days
- Grow Career: Education Assistance Program, Robust job skills training and Professional development opportunities
For more information, visit Nasdaq Benefits & Rewards Career page
