Senior Technology Auditor

Job Summary

To perform audits and reviews, and to review, test, and assess control environment to help safeguard credit union assets.

Mountain America Center - Hybrid: 9800 S Monroe St Sandy, UT 84070

Hybrid Schedule – this team is in office 3 days a week (Tuesday, Wednesday, and Thursday) with 2 days remote (Monday and Friday).

• Lead and perform audits of IT systems, applications, infrastructure, and cybersecurity processes.
• Execute all phases of the audit lifecycle, including planning, process walkthrough, risk assessment, fieldwork testing, and reporting.
• Evaluate and align third‑party IT control frameworks as inputs to audit scope.
• Identify risks and control gaps across MACU IT processes and systems.
• Contribute to IT audit entity risk assessments and development of the IT audit plan.
• Conduct and lead interviews with key MACU IT personnel to gather required understanding of process and risks for advisory engagements.
• Provide insights into IT and cyber risk exposures, control design, and governance effectiveness.
• Recommend practical, risk‑based solutions to improve IT controls, processes, and compliance posture.
• Prepare clear, concise audit documentation including work papers, findings, and audit reports.
• Prepare and communicate audit engagement status and observations to management and stakeholders.
• Track and validate remediation efforts to ensure timely resolution of audit findings.
• Contribute to continuous improvement of audit methodologies, tools, and data analytics capabilities.
• Stay current with emerging technologies, cybersecurity risks, and regulatory expectations.
• Support adoption of audit automation and GRC tools (e.g., Archer or similar platforms, if applicable in your environment).
• Partner with business, IT, Risk Management, and Compliance teams to enhance alignment across the Three Lines model.
• Serve as a trusted advisor while maintaining auditor independence and objectivity.
• Provide guidance and mentorship to staff auditors and interns.
• Review audit work papers and ensure quality and adherence to standards.
• Assist managers in audit planning and stakeholder engagement.
• Maintain and develop competencies aligned with internal audit standards and professional development expectations.
• Uphold independence, objectivity, and ethical standards in all audit activities.

• Bachelor’s degree in information systems, Computer Science, Accounting, Cybersecurity, Data Analytics or a related field.
• Three years performing end‑to‑end IT and/or cybersecurity audits.
• One or more years of experience leading IT and cybersecurity end‑to‑end process and control walkthroughs.
• Passed at least one of the following certifications: CISA, CPA, or CIA exams.

• Master’s degree in information systems, Computer Science, Accounting, Cybersecurity, Data Analytics or a related field.
• Demonstrated understanding of how to apply IT control frameworks (e.g., NIST, COBIT, ISO
  27001) in auditing.
• Demonstrated ability to assess risks, analyze complex systems, and identify control weaknesses.
• Strong written and verbal communication skills, with the ability to present to management with confidence.
• Demonstrated application of analytical thinking and synthesis of disparate information.
• Demonstrated ability to work autonomously and execute more than one audit engagement simultaneously.
• Achieved at least one of the following certifications: CISA, CPA, or CIA.

Managerial Responsibility:
None

Computer/Office Equipment

Skills:

Advanced level skill for Microsoft Office (Outlook, Word, PowerPoint, Excel), especially Excel.

Knowledge of computer‑assisted audit techniques:
Preferred.

Language

Skills:

Demonstrated ability to clearly communicate verbally and in writing; ability to read and follow instructions.

• Ability to perform ad hoc data analysis in conjunction with audits, as necessary.
• Understanding of financial institution operations and transactions.
• Ability to communicate effectively and courteously.
• Ability to understand regulations.
• Understanding of the credit union data system and ability to use a computer and software applications.
• Ability to recognize and analyze problems, improprieties, and opportunities for improvement.

• Ability to sit, talk and hear consistently.
• Ability to stand, walk, and use hands to handle or reach occasionally.
• Vision Requirements:
  Close vision (clear vision at 20 inches or less);
  Distance vision (clear vision at 20 feet or more).
• Weight lifted or force exerted:
  Ability to lift up to 25 pounds occasionally; may need to lift up to 50 pounds.
• Environmental:
  No unusual environmental factors (typical office). Noise environment: moderate noise (business office with computers and printers, light traffic).

This job is not eligible to be performed in Colorado or Connecticut, either remotely or in-person.

Mountain America Credit Union is an EEO/AA/ADA/Veterans employer.