JOB SUMMARYThe
Senior Auditor - IT Audit Focus participates in all critical aspects of delivering independent audit assurance services to Company stakeholders and the Board of Directors, with a primary emphasis on
information technology, cybersecurity, and technology-enabled business processes. This role develops and manages stakeholder relationships and performs audits across information technology controls, information security, application controls, data management, and supporting operational and compliance processes. The Senior Auditor will also contribute to the continued evolution of audit methodology and data analytics within the department. This position reports to an Audit Manager.
ESSENTIAL DUTIES AND RESPONSIBILITIES- Identify key risks within the Bank's technology environments, including IT general controls (access, change management, operations), cybersecurity, system availability, and data integrity, and evaluate appropriate controls to mitigate those risks.
- Perform walkthroughs of IT processes, systems, and automated controls, including interfaces and end-to-end business processes with system dependencies.
- Design risk-based internal audit procedures and work programs based on risk assessments, system architecture, regulatory expectations, and process flows.
- Execute audit testing to assess the adequacy, effectiveness, and consistency of technology controls and compliance with internal policies and regulatory requirements.
- Evaluate application controls, system configurations, user access, privileged access management, change management, batch processing, interfaces, and operations.
- Assess cybersecurity and information security controls, including logical access, vulnerability management, incident response, and data protection.
- Discuss audit findings and recommendations with IT management, information security leadership, and business partners; escalate significant issues to senior management as appropriate.
- Prepare clear, well-supported audit issues and reports in accordance with the approved audit plan and departmental methodology.
- Monitor and validate the timely implementation of management action plans resulting from audit findings.
- Identify opportunities to enhance audit efficiency, including the use of data analytics, automated testing, and continuous auditing techniques.
- Monitor emerging risks and trends related to information technology, cybersecurity, and regulatory expectations.
- Assist with ad-hoc reviews, investigations, and special projects related to technology, cybersecurity, or operational risk, as requested by senior management or the Audit Committee.
- Mentor and coach staff auditors, particularly in areas related to IT auditing and automated controls.
- Adhere to Seacoast Bank's Code of Conduct.
EDUCATION AND/OR EXPERIENCE- Bachelor's degree in Information Systems, Computer Science, Accounting, Finance, Business Administration, or a related field.
- Professional certification such as CISA, CIA, CPA, or CISSP strongly preferred.
- Demonstrated experience performing IT audits, including IT general controls, application controls, and technology risk assessments, within a financial institution or public accounting firm.
- Strong understanding of internal audit principles, COSO framework, internal controls, and IT risk management frameworks (e.g., COBIT, NIST).
- Working knowledge of banking regulations and supervisory expectations related to information technology and cybersecurity.
- Proficiency in MS Office (Word, PowerPoint, advanced Excel).
- Experience with audit management and data analytics tools (e.g., TeamMate, ACL, IDEA, or similar).
- Minimum of 3-5 years relevant experience in internal audit, IT audit, information security, or a related technology risk role within financial services.
