Mgr, IT Audit

Primary Purpose of Job

Responsible for the planning and execution of assessments of internal control and risk management activities, with an emphasis on risks related to Information Technology and Information Security. Uses judgement and experience to carry out a comprehensive internal audit plan in an effective manner with minimal supervision. Documents and communicates audit findings and recommendations to Management and the Audit Committee.

• Plans, develops, and executes specific audit procedures to meet planned objectives of audits of complex Bank technology activities, including technology in support of regulatory compliance and finance.
• Formulates recommendations regarding control deficiencies and system ineffectiveness; identifies areas for improved control, cost savings, and operational efficiencies.
• Prepares or reviews audit documents, work papers, audit reports, memoranda, and presentations; presents information in a clear, concise, and persuasive manner to the Audit Committee and management, as deemed applicable.
• Meets and communicates with Management to perform audit procedures and provides status updates, findings and recommendations, and forward looking insights.
• Drives the IT audit risk assessment and track for significant changes in risk factors.
• Manages a team of IT auditors and/or co-sourced vendor to drive completion of technology and information security audits.
• Supports the Internal Audit relationship between technology and information security.

5 years:
Information Security, Network or PC operating systems, SDLC, Business Continuity, Computer Operations

3 years:
Auditing experience

• Ability to apply independent judgement on complex issues
• Ability to interact with a wide range of internal and external constituencies.
• Strong problem-solving and analytical skills.
• Excellent listening, verbal, and written communication skills.
• Proficient in Microsoft Office applications (ie. Word, Excel, Visio, PowerPoint, Outlook).
• Proficient in data analytics and able to use tools such as ACL preferred.

• CPA, CIA, or CISA, CISSP preferred

EOE, including disability/veterans