IT Auditor II

At VyStar, we offer competitive pay, an excellent benefit package that includes a 401(k) Plan, an extensive paid technical and on-the-job training program, and tuition reimbursement--available to all full and part time employees. Part time positions start at a minimum of 30 hours per week. We encourage you to become a part of VyStar Credit Union's family of employees.

As part of our preliminary recruiting process, we kindly ask candidates to complete an online assessment sent to their email from our third-party vendor, Hire Vue. To be considered, please complete the assessment within the allotted time. If you don't receive it after applying, check your spam folder. Assessment results are valid for 6 months.

This position provides professional and innovative audit services to the Board of Director’s Audit Committee, Board of Directors, and Senior Management of the credit union and its subsidiaries that assist in achieving VyStar’s strategic goals.

• Continuously maintain independence and objectivity.
• Responsible for understanding and applying the Institute of Internal Auditors’ International Professional Practices Framework, which includes the Code of Ethics and Standards for Professional Practice of Internal Auditing (Standards) as well as ISACA IT Audit and Assurance Standards.
• Proactively prepare for the audit assignments by performing research and due diligence of the area in scope and developing client interview questions with no supervision from the Auditor-in-Charge.
• Able to perform the following functions with limited guidance from the Auditor-in-Charge or Audit Management
  • Identify and assess the variety of risk present in information technology general controls, business application systems, and related information technology supporting processes.
  • Evaluate the potential for fraudulent activity.
  • Identify and evaluate key controls designed to mitigate risks.
  • Analyze information collected and draw conclusions based on professional judgment.
• Perform information technology audit assignments including information system general controls, configuration management, system development, change management, identity access management, cloud security and access permission testing with limited oversight by the AIC or IT Audit Management.
• Ability to interview and interact with clients without oversight from the Auditor-in-Charge.
• Document work papers and communicate clear and concise audit findings verbally and in written form in accordance with the Standards.
• Develop sufficient knowledge on information technology and information security best practices, as well as applicable policies/procedures, laws, and regulations in order to provide guidance to the team when in the Auditor-in-Charge role.
• Perform Auditor-in-Charge role for low-risk information technology audits which include:
  • Managing all audit phases (e.g., planning the scope of the review, execution of fieldwork, reviewing work papers and auditor’s judgment, draft report writing, conduct draft report meetings, prepare post-audit evaluations, etc.)
  • Ensure the quality of work adheres to the Institute of Internal Auditors’ International Standards for Professional Practices of Internal Auditing (Standards).
  • Establish open communication channels with assigned clients and participate in quarterly meetings, promoting risk management practices and developing specialized knowledge.
• Perform other duties and responsibilities as assigned.

Bachelor’s degree in MIS, Accounting, Finance, or related business field is preferred, however, 4 years of IT experience may be substituted. Previous IT audit experience not required. Previous financial institution experience preferred. Pursuit of a professional certification (e.g., CISA, etc.) once experience requirements are met is highly encouraged.