Excellent communication skills for articulating risks and recommendations.
Ability to maintain client confidentiality regarding sensitive transactions.
Strong project and time management skills, with a focus on accuracy.
Team-oriented with problem-solving abilities and interpersonal skills.
Knowledge of Sarbanes-Oxley (SOX) and IT governance frameworks such as COBIT and NIST.
Responsibilities
Lead the development of IT audit engagements by identifying risks and their impact.
Assess compliance with Sarbanes-Oxley and organizational policies.
Evaluate technology processes and carry out control effectiveness testing.
Document audit tests, evidence, and results in work papers.
Prepare and present audit findings and recommendations to stakeholders.
Update audit programs and recommend policy enhancements.
Support Enterprise Risk Management assessments and projects.
Benefits
Opportunity for professional development and continued education.
Collaboration and knowledge sharing within the Internal Audit team.
Exposure to enterprise-level risk assessments and diverse IT environments.
Full Job Description
Job Title: Senior IT Auditor Job Description:
Essential Duties and Responsibilities:
Lead and support the development of Information Systems Audit engagements by identifying business process and information technology (IT) risks; determining risk severity and business impact; and developing audit tests of controls.
Assess the technology control environment for compliance with Sarbanes-Oxley (SOX), regulatory requirements, and organizational policies.
Evaluate underlying technology processes and risks, leading the execution of control design and operating effectiveness testing.
Prepare audit work papers by documenting audit tests, evidence, and results.
Draft, finalize, and present audit engagement results, clearly articulating findings, actionable recommendations, and associated risks to IT Management and key stakeholders.
Update audit programs, questionnaires, and recommend changes or enhancements to Internal Audit policies and procedures.
Support Enterprise Risk Management (ERM) Risk Assessments and other ERM projects.
Maintain professional and technical knowledge by attending educational workshops; reviewing professional publications; establishing personal networks; and participating in professional societies.
Prepare special audit and control reports by collecting, analyzing, and summarizing operating information and trends.
Contribute to Internal Audit team effort by accomplishing related results and training team members as needed.
Perform other duties and special projects as assigned.
Qualifications:
Excellent written, oral, and interpersonal communication skills, with the proven ability to articulate risks and recommendations clearly to key stakeholders.
Must maintain confidentiality of client transactions and bank records.
Proven project and time management skills with the ability to prioritize, manage multiple audit tasks, and work independently with a high degree of accuracy.
Team-oriented with a positive attitude, strong problem-solving capabilities, and excellent relationship-management skills.
Strong working knowledge of Sarbanes-Oxley (SOX), standard audit practices, IT General Controls (ITGCs), and IT governance frameworks (e.g., COBIT, NIST).
Supervisory Responsibilities:
None
Education and/or Experience:
Bachelor's degree (B.S./B.A.) from a four-year college or university in Business, Information Systems, Computer Science, or a related field. Master's degree (Accounting, MIS, Computer Science) or MBA preferred.
2-3+ years of IT audit experience gained through public accounting/auditing (Big 4 experience a plus) and/or relevant industry experience.
Financial services/banking experience preferred.
Computer and Software Skills:
Skilled in operation of a personal computer, including the Google suite of products, Microsoft Word, PowerPoint and Excel
