AVP, IT Auditor

Overview

ABOUT US:

Founded in 1993, Bayview Asset Management is an investment management firm focused on investments in mortgage and consumer credit, including whole loans, asset-backed securities, mortgage servicing rights, and other credit-related assets.

POSITION SUMMARY

The Assistant Vice President (AVP), IT Audit Manager serves as a senior leader within Bayview’s Internal Audit Department, responsible for delivering independent assurance on technology governance, cybersecurity, and operational resiliency across the enterprise. The AVP partners with senior IT and business leaders—including the CIO, CISO, and CTO—to assess the effectiveness of IT controls, identify emerging risks, and drive continuous improvement in control design, automation, and analytics.

This role also provides mentorship to audit staff and fosters innovation in audit execution.
Travel is expected to be limited (generally less than 10%).

Audit Execution - Planning

• Lead interviews and walkthroughs with business and technology owners.
• Develop audit scope, approach, and planning memoranda for IT audit engagements.
• Contribute to the development of the annual audit plan and enterprise risk assessment.

Audit Execution - Risk & Control Evaluation

• Design and execute risk and control matrices for IT processes, including applications, cloud, network, and cybersecurity.
• Evaluate compliance with cybersecurity and data privacy regulations (e.g., NY DFS Part 500, GLBA, GDPR).
• Perform control testing and analytical procedures with minimal supervision.
• Document work performed using audit management software (e.g., Audit Board) in accordance with professional standards.
• Identify control gaps, root causes, and recommend actionable improvements to strengthen risk management and governance

Audit Methodology, Data Analytics, and Tools

• Apply Bayview’s Internal Audit Procedures and the IIA International Professional Practices Framework (IPPF).
• Promote continuous improvement through the use of agile audit techniques, analytics, and automation.
• Drive enhancements in audit methodology, templates, and toolsets.
• Serve as a resource for technical guidance, risk evaluation, and best practices across the audit team.

Governance and Stakeholder Engagement

• Partner with IT and business leadership to align audit focus with enterprise risk priorities.
• Communicate emerging technology risks, trends, and control themes to senior management and the Audit Committee.
• Support interactions with regulators, external auditors, and other assurance providers regarding IT risk and controls.

Project Management, Communication, and Reporting

• Lead meetings to obtain process understanding, provide engagement updates, and communicate audit results.
• Develop clear, concise, and well-supported audit reports summarizing scope, findings, and recommendations.
• Present results to management and influence agreement on control enhancements and remediation actions.

Team and Personnel Development

• Mentor and provide feedback to junior auditors; may supervise direct reports.
• Foster a collaborative, high-performance culture focused on learning and innovation.
• Share technical expertise, emerging risk insights, and best practices with broader team.

Corporate Responsibility

• Demonstrate a strong understanding of Bayview’s policies, regulatory obligations, and data handling responsibilities.
• Uphold Bayview’s values of honesty, integrity, professionalism, accountability, creativity, and teamwork.
• Take ownership for work quality, adapt to change effectively, and maintain a proactive approach to problem solving.

EDUCATION AND EXPERIENCE

• Bachelor’s degree in Information Systems, Computer Science, Accounting, or a related field.
• Minimum of 6 years of experience in IT audit, cybersecurity, or related technology risk disciplines.
• Experience in financial services, asset management, lending, or mortgage servicing preferred.
• Familiarity with regulatory and control frameworks such as FFIEC, NIST CSF, COBIT, and SOX 404.
• Knowledge of emerging technologies such as AI/ML, RPA, and cloud security.
• Public accounting or Big 4 experience preferred.kills, Knowledge, and Abilities.
• Preferred certifications include CISA, CISSP, CIPP, CIA, or cloud…