IT Senior Auditor

SUMMARY:

The position of Information Technology (IT) Senior Auditor is responsible for performing and coordinating the planning, fieldwork, and reporting of IT-related audits and IT SOX testing, ensuring compliance with regulations and bank policy and procedures. 

ESSENTIAL FUNCTIONS:

• Develops and executes Information Technology-related audits in areas such as, but not limited to, cybersecurity, IT operations, business continuity / disaster recovery, and information security. Incumbent will perform both substantive testing procedures as well as tests of controls. 
• Conducts walkthroughs and prepares documentation supporting the understanding of Information Technology-related processes.
• Performs testing of Information Technology SOX controls in areas such as, but not limited to, authentication, user access provisioning/de-provisioning, change management.
• Prepares and updates risk assessments for assigned areas.
• Reviews and / or assists in the preparation of reports of audit findings, presenting any irregularities or exceptions to appropriate audit personnel.
• Utilizes sound analytical and technical skills to communicate audit issues and findings with process owners and management.
• Follows up on high risk Information Technology issues for impact and tests the design and sustainability of remediation activities.
• Assists with execution of continuous monitoring activities to keep current on risks, initiatives, etc. in the business.
• Identifies opportunities to automate audit testing and processes through use of technology and data to create efficiencies.
• Assists in coordination and delivery of audit requests for regulatory examiners and/or external auditors as needed.
• Completes annual compliance courses and required CPE.
• Adheres specifically to all corporate policies and procedures. Also adheres to Federal and State regulations and laws; including, the Bank Secrecy Act and the Anti-Money Laundering Act.
• Adheres to all levels of our Service Excellence standards.

GENERAL QUALIFICATIONS:

Knowledge & Experience:  These specifications are general guidelines based on the minimum experience normally considered essential to the satisfactory performance of this position.  Individual abilities may result in some deviation from these guidelines.

• Bachelor’s degree from a four-year college or university. 
• Minimum three years of experience in audit, risk, or equivalent, preferably in the financial institution industry, including experience working in Information Technology, Information Security, Cybersecurity, Business Continuity / Disaster Recovery. 
• CISA certification preferred. 
• Experience auditing Information Technology risks and SOX controls. 
• Strong analytical skills in identifying Information Technology controls and assessing functionality. 
• Detail oriented in documenting work performed in the preparation of work papers, spreadsheets and word documents, and audit reports. 
• Self-starter capable of planning and executing audit test plans within a risk-based audit framework.
• Strong interpersonal, written and oral communication skills, including the ability to work with all levels of staff, management, and bank regulators. 
• Proficient in MS Office tools including Microsoft Excel, Word and PowerPoint. 
• Must be able to establish relationships and effectively communicate with all levels of bank personnel. 
• Must maintain knowledge of many areas of the financial institution. 
• Working knowledge of laws and regulations pertaining to financial institutions, and the ability to interpret and understand laws and regulations. 
• Adhere to bank policies and procedures.

Physical Demands/Work Environment: Vision, hearing, speech, dexterity, visual concentration.  A valid driver’s license is required.  Must have the ability to stand, walk, sit and use hands and fingers.  Must have the ability to work the hours and days required to complete the essential functions of the position, as scheduled.  The environment is a professional office with standard office equipment.

Cognitive Requirements:  Learning, thinking, concentration, ability to exercise self-control, ability to work in a customer relations’ environment.  Must be able to pay close attention to detail and be able to work as a member of a team.  Must have the ability to interact effectively with co-workers and customers, and exercise self-control and diplomacy in customer and employee relations’ situations.  Must have the ability to exercise discretion as well as appropriate judgments when necessary.

Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.