Job DescriptionNavy Federal Credit Union currently does not provide sponsorship for this role. Applicants must be authorized to work in the United States without the need for current or future sponsorship.The IT Auditor II will support the execution of complex audits across Navy Federal, with a primary focus on core IT audit areas such as information security, technology infrastructure, and core IT processes. This role will evaluate key technology risks and controls and apply data analytics to enhance audit research, scoping, and testing. The position also offers opportunities to participate in broader Internal Audit initiatives, collaborate with stakeholders across the organization, and promote a culture of partnership, trust, and accountability.
This position is eligible for the TalentQuest employee referral program. If an employee referred you for this job, please apply using the system-generated link that was sent to you.
Responsibilities- Conduct IT and/or integrated audits in accordance with Navy Federal and industry audit standards.
- Assist the Auditor-In-Charge in identifying and assessing technology risks to develop and execute a risk-based audit work program.
- Coordinate with points of contact and first and second lines of defense to conduct preliminary research, participate in and occasionally lead process walkthroughs, document process narratives and workflows, identify key risks and controls, and obtain audit evidence for testing.
- Brainstorm ideas for leveraging data analytics and technology to drive deeper risk coverage and insights to business partners.
- Perform IT control testing across multiple audits concurrently. Apply critical thinking skills by seeking to understand and execute assigned control testing and document results according to professional and internal standards.
- Independently review and analyze audit evidence and testing results to determine the design and operating effectiveness of controls.
- Identify and summarize potential issues and discuss them with the Auditor-In-Charge in a timely manner.
- Prepare audit workpapers that document relevant information obtained, analyzed, and evaluated to support audit observations, issues, and conclusions.
- Self-manage workload and timelines, and report delays and issues to audit management.
- Participate in Internal Audit strategic initiatives and act as a champion of change and continuous improvement.
- Stay abreast of and ensure compliance with applicable federal, state, and industry laws, regulations, and guidelines.
- Actively monitor and stay current with evolving industry trends, technology, and emerging risks that may impact the company.
- Perform other duties as assigned.
Qualifications- Minimum one year of experience in IT audit.
- Working knowledge of IT control concepts and practices, as well as risk-based auditing techniques.
- Working knowledge of one or more of the following areas: IT Risk, General Controls, Information Security Frameworks, and industry best practices.
- Effective ability to manage multiple priorities independently and work collaboratively in a team environment to achieve goals.
- Effective interpersonal and communication skills.
- Effective organizational, planning, and time management skills.
- Effective word processing and spreadsheet software skills.
- Effective critical thinking, analytical, and problem-solving skills.
- Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Information Systems, Accounting, or a related field, or an equivalent combination of education, training, and relevant experience.
Desired Qualifications- Experience with credit union financials and/or regulations.
- Working knowledge of Navy Federal products, services, programs, policies, and procedures.
- At least three years of direct, hands-on experience working within an IT audit team at a large financial institution, including experience auditing information security, technology infrastructure, and core IT processes.
- Experience applying data analytics to support audit research, risk assessment, scoping, and testing.
- One or more relevant IT, cybersecurity, or audit certifications, such as CompTIA A+, Network+, Security+, CISA, CRISC, CISSP, or GIAC Security Essentials (GSEC).
- A minor, concentration, or formal coursework in data analytics, business intelligence, data science, or a related discipline.
Additional InformationHours:- Monday - Friday, 8:00AM - 4:30PM
Location:- 820 Follin Lane, Vienna, VA 22180
- 5510 Heritage Oaks Drive, Pensacola, FL 32526
- 141 Security Drive, Winchester, VA 22602
