Senior IT Internal Auditor

Patelco Credit Union is a not-for-profit credit union with a purpose to build financial health and wellbeing for our members. Since 1936, Patelco has grown from $500 in assets to over $9 billion in assets and is the 7th largest credit union in California with branches throughout Northern California.

We are here for our members throughout all their stages of life. Meeting them with the products and services to help them plan purposefully for their futures and to secure our life-long partnership as their trusted financial advocate. As one team, we are all committed to delivering service, empowering financial literacy, creating products, and providing new technology for our members.

We believe that work should be rewarding, challenging, and enjoyable. We’re dedicated to creating a positive and supportive culture where our team members can thrive. If you’re looking to use your skills and knowledge to make a difference in our members’ lives, Patelco could be the perfect fit for you.

The Senior IT Internal Auditor is responsible for planning, executing, and reporting on IT audits to evaluate the effectiveness of internal controls, risk management, and governance processes within the financial institution’s technology environment. This role ensures compliance with regulatory requirements, industry standards, and internal policies while identifying opportunities to enhance IT operations and mitigate risks. The Senior IT Internal Auditor collaborates with cross-functional teams to provide insights and recommendations that strengthen the institution’s IT infrastructure and safeguard its assets.

Audit Planning and Execution:

• Develop and execute risk-based IT audit plans to assess the design and operating effectiveness of IT controls, systems, and processes.
• Perform audits of IT infrastructure, applications, cybersecurity measures, data management, and third-party vendors.
• Evaluate compliance with regulations such as FFIEC, GLBA, GDPR, and other relevant financial industry standards.
• Identify and assess IT risks, including cybersecurity, data integrity, and system availability risks.

Risk Assessment and Control Evaluation:

• Conduct risk assessments to identify vulnerabilities in IT systems and processes.
• Test IT general controls (ITGC), application controls, and automated controls to ensure they mitigate identified risks.
• Review security configurations, access controls, change management, and disaster recovery processes.

Reporting and Communication:

• Prepare clear, concise, and actionable audit reports with findings, recommendations, and management action plans.
• Present audit results to senior management, highlighting key risks and remediation strategies.
• Collaborate with IT and business units to ensure timely resolution of audit findings.

Advisory and Consulting:

• Provide guidance to management on IT governance, risk management, and control frameworks.
• Stay informed on emerging technologies, cyber threats, and regulatory changes to advise on best practices.
• Participate in IT project reviews to ensure controls are embedded during system implementations or upgrades.

Team Leadership and Development:

• Lead or assist in special projects, investigations, or IT-related fraud reviews as needed.
• Contribute to the continuous improvement of the Internal Audit department’s methodologies and tools.

• Bachelor’s degree in Information Technology, Computer Science, Accounting, Finance, or a related field.
• Advanced degree or relevant certifications such as CISA (Certified Information Systems Auditor), CISSP (Certified Information Systems Security Professional), CIA (Certified Internal Auditor), Certified in Risk and Information Systems Control (CRISC) or equivalent is…