Primary Purpose of JobResponsible for the planning and execution of assessments of internal control and risk management activities, with an emphasis on risks related to Information Technology and Information Security. Uses judgement and experience to carry out a comprehensive internal audit plan in an effective manner with minimal supervision. Documents and communicates audit findings and recommendations to Management and the Audit Committee.
Major Job Accountabilities- Plans, develops, and executes specific audit procedures to meet planned objectives of audits of complex Bank technology activities, including technology in support of regulatory compliance and finance.
- Formulates recommendations regarding control deficiencies and system ineffectiveness; identifies areas for improved control, cost savings, and operational efficiencies.
- Prepares or reviews audit documents, work papers, audit reports, memoranda, and presentations; presents information in a clear, concise, and persuasive manner to the Audit Committee and management, as deemed applicable.
- Meets and communicates with Management to perform audit procedures and provides status updates, findings and recommendations, and forward looking insights.
- Drives the IT audit risk assessment and track for significant changes in risk factors.
- Manages a team of IT auditors and/or co-sourced vendor to drive completion of technology and information security audits.
- Supports the Internal Audit relationship between technology and information security.
Experience Required Minimum of Eight (8) years of:
- Experience in Information Security, Network or PC operating systems, SDLC, Business Continuity or Computer Operations
Minimum of Three (3) years of:
- Audit experience, preferably leading or managing audit teams
Required Skills or Training- Demonstrated leadership or supervisory experience.
- Ability to coach, mentor, develop and evaluate teammates.
- Ability to apply independent judgement on complex issues
- Ability to interact with a wide range of internal and external constituents.
- Strong problem-solving and analytical skills.
- Excellent listening, verbal, and written communication skills.
- Proficient in Microsoft Office applications (ie. Word, Excel, Visio, PowerPoint, Outlook).
- Proficient in data analytics and able to use tools such as ACL preferred.
Professional Certifications, Licenses, and/or Registration Requirements- CPA, CIA, CISA, or CISSP preferred.
