IT Auditor II

At VyStar, we offer competitive pay, an excellent benefit package that includes a 401(k) Plan, an extensive paid technical and on-the-job training program, and tuition reimbursement–available to all full and part time employees. Part time positions start at a minimum of 30 hours per week.

We encourage you to become a part of VyStar Credit Union’s family of employees.

ACCOUNTABILITY STATEMENT

This position provides professional and innovative audit services to the Board of Director’s Audit Committee, Board of Directors, and Senior Management of the credit union and its subsidiaries that assist in achieving VyStar’s strategic goals.

Maintain the highest professional competency and integrity standards in conformance with the Institute of Internal Auditors’ International Professional Practices Framework, which includes the Code of Ethics and Standards for Professional Practice of Internal Auditing (Standards) and ISACA IT Audit and Assurance Standards.

ESSENTIAL JOB FUNCTIONS:

• Continuously maintain independence and objectivity.
• Responsible for understanding and applying the Institute of Internal Auditors’ International Professional Practices Framework, which includes theCode of Ethicsand Standards for Professional Practice of Internal Auditing (Standards) as well as ISACA IT Audit and Assurance Standards.
• Proactively prepare for the audit assignments by performing research and due diligence of the area in scope and developing client interview questions with no supervision from the Auditor-in-Charge.
• Able to perform the following functions with limited guidance from the Auditor-in-Charge or Audit Management:
• Identify and assess the variety of risk present in information technology general controls, business application systems, and related information technology supporting processes.
• Evaluate the potential for fraudulent activity.
• Identify and evaluate key controls designed to mitigate risks.
• Analyze information collected and draw conclusions based on professional judgment.
• Perform information technology audit assignments including information system general controls, configuration management, system development, change management, identity access management, cloud security and access permission testing with limited oversight by the AIC or IT Audit Management.
• Ability to interview and interact with clients without oversight from the Auditor-in-Charge.
• Document work papers and communicate clear and concise audit findings verbally and in written form in accordance with the Standards.
• Develop sufficient knowledge on information technology and information security best practices, as well as applicable policies/procedures, laws, and regulations in order to provide guidance to the team when in the Auditor-in-Charge role.
• Perform Auditor-in-Charge role for low-risk information technology audits which include:
  • Managing all audit phases (e.g., planning the scope of the review, execution of fieldwork, reviewing work papers and auditor’s judgment, draft report writing, conduct draft report meetings, prepare post-audit evaluations, etc.)
  • Ensure the quality of work adheres to the Institute of Internal Auditors’ International Standards for Professional Practices of Internal Auditing (Standards).
• Establish open communication channels with assigned clients and participate in quarterly meetings, promoting risk management practices and developing specialized knowledge.
• Perform other duties and responsibilities as assigned.
• All employees and business units, as first line of defense, are expected to proactively help identify, assess, manage, and report risks within their domain of work. To enhance a healthy risk culture and support our growth for good pillar, employees will maintain vigilance in safeguarding our operations while ensuring compliance with regulatory mandates. The Risk team serves as the second line of defense by…