Job DescriptionNavy Federal Credit Union currently does not provide sponsorship for this role. Applicants must be authorized to work in the United States without the need for current or future sponsorship.To contribute to the execution of complex IT, information security, pre-implementation, and integrated engagements across Navy Federal. The IT Auditor II will identify and test key risks and controls in the business and participate in Internal Audit initiatives. This position will play a role in promoting partnership, trust, and accountability within our organization and building deeper relationships with our audit stakeholders.
This position is eligible for the TalentQuest employee referral program. If an employee referred you for this job, please apply using the system-generated link that was sent to you.
Responsibilities- Perform pre-implementation reviews of new and changing technology to evaluate whether risks are identified and controls are appropriately designed before go-live
- Contribute toward the execution of other advisory and occasional IT audit engagements in accordance with Navy Federal and industry audit standards
- Assist the Auditor-In-Charge in identifying and assessing technology risks to develop and execute a risk-based audit or advisory work program
- Coordinate with points of contact and first/second lines of defense to conduct preliminary research, participate in and occasionally lead process walkthroughs, document process narratives and workflows, identify key risks and controls, and obtain evidence for testing
- Brainstorm ideas for leveraging data analytics and technology to drive deeper risk coverage and insights to business partners
- Perform IT testing, including IT controls, across multiple engagements concurrently. Apply critical thinking skills by seeking to understand and execute assigned testing and document results according to professional and internal standards
- As part of pre-implementation and advisory engagements, independently review and analyze evidence, requirements, and test results to assess design adequacy, control readiness, and whether the solution meets its intended objectives before go-live
- Evaluate requirements traceability, system integration and data migration testing, and go-live readiness in partnership with project teams
- Identify and summarize potential issues and discuss with the Auditor-In-Charge in a timely manner
- Prepare workpapers to document relevant information obtained, analyzed, and evaluated that support audit observations/issues and conclusions
- Self-manage workload/timelines and report delays and issues to audit management
- Participate in Internal Audit strategic initiatives and act as a champion of change and continuous improvement
- Stay abreast of and ensure compliance with applicable federal, state and industry laws, regulations, and guidelines
- Actively monitor and stay current with evolving industry trends, technology, and emerging risks that may impact the company
- Perform other duties as assigned
Qualifications- Minimum one year of experience in IT audit
- Working knowledge of IT control concepts and practices and risk-based auditing techniques
- Working knowledge of one or more functions: IT Risk, General Controls, Information Security Frameworks and best practices
- Effective skill in managing multiple priorities independently and operate well in a team environment to achieve goals
- Effective interpersonal and communication skills
- Effective organizational, planning and time management skills
- Effective word processing and spreadsheet software skills
- Effective critical thinking, analytical, and problem-solving skills
- Bachelor's degree or the equivalent combination of experience, education, and training
Desired Qualifications - Exposure to pre-implementation reviews, advisory engagements, or technology implementation projects
- One to three years of experience in internal audit, IT audit, or a technology/risk-related field
- Experience with credit union financials and/or regulations
- Working Knowledge of NFCU products, services, programs, policies, and procedures
- IT Certifications - CompTIA A+, Network+, Security +, CISA, CRISC, CISSP, GIAC Security Essentials (GSEC), or CIA Certification
- Master's degree in Computer Science, Information Technology, or related field
Additional InformationHours:- Monday - Friday, 8:00AM - 4:30PM
Location:- 820 Follin Lane, Vienna, VA 22180
- 5510 Heritage Oaks Drive, Pensacola, FL 32526
- 141 Security Drive, Winchester, VA 22602
