IT Internal Auditor

Patelco Credit Union is a not-for-profit credit union with a purpose to build financial health and wellbeing for our members. Since 1936, Patelco has grown from $500 in assets to over $9 billion in assets and is the 7th largest credit union in California, with branches throughout Northern California.

We are here for our members throughout all stages of life, meeting them with products, services, and new technology that help them plan purposefully for their futures and support a lifelong partnership with Patelco as their trusted financial advocate. As one team, we are committed to delivering service, empowering financial literacy, and making a positive difference in our members’ lives.

We believe work should be rewarding, challenging, and enjoyable. We are dedicated to creating a positive and supportive culture where team members can thrive.

The Staff IT Internal Auditor is responsible for supporting the planning, execution, and reporting of risk-based audits across Patelco Credit Union’s information technology and cybersecurity environment. This role evaluates the design and effectiveness of technology controls, risk management, and governance processes to determine whether technology risks are appropriately identified, managed, and monitored.

The Staff IT Internal Auditor performs audit procedures across areas such as information security, cybersecurity, identity and access management, IT operations, change management, cloud computing, system development, business continuity and disaster recovery, third-party technology risk, and other technology-related processes.

The role works collaboratively with Internal Audit team members and business and technology stakeholders to identify control weaknesses, assess associated risks, develop practical recommendations, and support compliance with applicable regulatory requirements, industry standards, and Patelco policies and procedures.

• Perform risk-based IT and cybersecurity audits under the direction of IT Internal Audit management, including audits of information security, identity and access management, IT operations, change management, application and system development, cloud computing, infrastructure, business continuity and disaster recovery, third-party technology risk, and other technology-related areas.
• Assist in planning IT audit engagements, including performing preliminary risk assessments, understanding technology environments and business processes, identifying key risks and controls, defining audit objectives and scope, and developing audit procedures and testing methodologies.
• Evaluate the design and operating effectiveness of technology controls through interviews, walkthroughs, inspection of documentation and system configurations, data analysis, sampling, and other audit procedures.
• Assess IT general controls and technology processes, including logical access, privileged access, user provisioning and deprovisioning, change management, IT operations, system development, configuration management, backup and recovery, and related controls.
• Evaluate cybersecurity and information security controls designed to protect Patelco’s systems, applications, infrastructure, and member information, including controls related to access management, vulnerability management, security monitoring, network security, cloud security, and data protection, as applicable to assigned audits.
• Document audit procedures and testing results in accordance with Internal Audit methodology and professional standards, ensuring work papers clearly support audit conclusions and findings.
• Identify control weaknesses, process gaps, and areas of non-compliance; evaluate the associated technology and business risks; and work with IT Internal Audit management to develop clear, practical, and risk-based recommendations.
• Assist in drafting audit findings and reports that clearly communicate the condition identified, applicable criteria, root cause, risk and impact, and recommended corrective action.
• Communicate audit observations and findings with technology and business stakeholders, obtain management responses where appropriate, and help resolve questions or differences regarding audit results.
• Perform follow-up testing of management corrective actions to determine whether identified audit issues have been appropriately remediated and supporting evidence is sufficient to close the issue.
• Use data analytics and technology-assisted audit techniques, where…