Internal IT Audit: Cloud Risk Specialization

this role is hybrid, 4 days per week onsite, based out of buffalo, ny; bridgeport, ct; or wilmington, de. Will consider boston, ma or nyc applicants as well. Candidates must be within a commutable distance or willing to relocate.

• must have senior level or above internal audit it experience.
• this individual contributor position will be a part of the technology domain audit team and will be responsible for the following:
• providing senior level expertise and contributing to delivery of assurance services specific to the bank’s cloud and colo data center migration. This position will play an important role in carrying out the division’s strategic approach to cloud auditing along with assessing the adequacy of the structures and processes put into place by management to govern the organization’s migration of systems to both microsoft azure public cloud and colo data center facility destinations.
• providing subject matter expertise and leading the execution of audit procedures over cloud-based infrastructure and cybersecurity capabilities, all while ensuring high quality deliverables in accordance with division and professional standards.
• owning the delivery of assurance services across other areas of the technology and cybersecurity domains, as needed. This could include leading other audit engagements in these domains, completing issue validation procedures, executing continuous auditing activities, etc.

• plan, coordinate and maintain full ownership over execution of assurance work specific to core technology infrastructure and cybersecurity audits, with a particular focus on assessing cloud risk management practices at the bank. This role is expected to operate with a high level of independence and to deliver high quality deliverables given associated experience.
• assist the audit division in execution of its strategy specific to the holistic coverage of cloud risks across the audit plan and in development of cloud specific audit programs.
• stay abreast of best practices, industry developments, and changing or emerging technology and cloud risks, consult with audit teams to ensure their coverage is appropriate in applicable audits given this information, and ensure senior management in audit is kept apprised of impacts to the division’s assurance work.
• responsible for becoming intimately familiar with the organizational structure for the bank’s technology division and developing relationships with key members of management.
• organize and complete work within established budgets and time frames with minimal direction from audit management.
• incorporate the use of data analytics/ai throughout all phases of the audit process.
• make sound decisions independently, exhibiting initiative and intuitive thinking.
• maintain ongoing communication with the 1st and 2nd line risk management/oversight organizations to align assurance activities, share risk information, etc.
• supervise other audit staff as needed, based on the body of work being completed.

• plan, coordinate and maintain full ownership over execution of assurance work specific to core technology infrastructure and cybersecurity audits, with a particular focus on assessing cloud risk management practices at the bank. This role is expected to operate with a high level of independence and to deliver high quality deliverables given associated experience.
• assist the audit division in execution of its strategy specific to the holistic coverage of cloud risks across the audit plan and in development of cloud specific audit programs.
• stay abreast of best practices, industry developments, and changing or emerging technology and cloud risks, consult with audit teams to ensure their coverage is appropriate in applicable audits given this information, and ensure senior management in audit is kept apprised of impacts to the division’s assurance work.
• responsible for becoming intimately familiar with the organizational structure for the bank’s technology division and developing relationships with key members of management.
• organize and complete work within established budgets and time frames with minimal direction from…