Senior IT Audit Analyst

Responsibilities

• Provide independent and objective audit and advisory services that help Fidelity manage risk, improve customer service, and enhance business performance
• Perform complex technology and/or business-integrated audits in support of Fidelity’s businesses
• Work with business and technology management to build an understanding of complex functions
• Workflows technology and end-to-end related processes, highlighting risks and controls embedded throughout the function
• Leverages audit automation tools in the evaluation of business operations and systems
• Performs audit test work including organizing and analyzing data, testing controls and documenting results
• Applies data analytics concepts, principles, and techniques to effectively identify control deficiencies
• Help draft audit reports that provide a clear description of issues identified, related implications to the business or enterprise as a whole and management action plans to resolve the issues
• Coaches and mentors more junior members including interns/co-ops on the team
• Builds working relationships with audit teams and clients

• BA/BS/MS in Technology, Information Systems, Cybersecurity, or related field of study
• Professional audit or information security certifications preferred (CIA, CPA, CISA, CISSP, SANS GIAC, etc.)
• Cloud computing (AWS or Azure) related associate-level certifications preferred
• Security or Professional cloud certifications would be a plus
• 3-5 years of experience in performing information technology audits, preferably in financial services
• Understanding of cloud security, containerization, API, Dev Ops, secure software development, application security, databases, and operating systems
• Ability to independently perform hands-on IT general controls testing across many of these areas
• Understanding of authentication, authorization, and credential management
• Understanding of Artificial Intelligence, Machine Learning, Data Science and Robotic Process Automation
• Understanding of security monitoring activities that enable vulnerability, internal/external threat monitoring, incident management and threat intelligence activities
• Ability to work simultaneously on multiple tasks, manage priorities and workload
• Good technical problem solving and data analytical skills
• Scripting and automation experience would be a plus
• Commitment to innovative, collaborative, and digital working style
• Strong presentation, written, and interpersonal communication skills
• Hands‑on work style and ‘can do’ attitude with a strong desire to make things happen
• Curiosity and hunger to learn