Senior Technology Auditor

• Assist team leaders and Senior Managers/Managers in the execution of assigned audit tasks in line with American Express’ Internal Audit Methodology, internal policies and standards, and regulatory expectations throughout the audit lifecycle.
• Evaluate processes under review utilizing professional skepticism; execute audit tests and clearly document test results in accordance with internal policies and procedures.
• Hold walkthroughs with client personnel to understand, assess, evaluate, and document relevant risks and controls.
• Assist team leaders and Senior Managers/Managers with routine client status meetings, audit requests, and other administrative tasks.
• Assist team leaders and Senior Managers/Managers in documentation and evaluation of audit observations, findings.
• Validate management's corrective action plans to address business-identified issues, audit findings and regulatory remediations.
• Contribute to the development and periodic reviews of analytic control testing and ad hoc analytics, to drive timely risk insights, testing efficiencies and increased audit coverage.
• Develop a strong understanding of American Express’ business model, products, services, and organizational units.
• Maintain audit proficiency through ongoing professional development, including data analytics literacy skills, technology, banking best practices and regulatory expectations.

• 3+ years of relevant IT or cybersecurity audit experience
• Knowledge and experience in applying control theory and professional auditing practices throughout the audit lifecycle and special reviews.
• Understanding of regulatory, accounting, and financial industry best practices relevant to the business, including technology and data implications.
• Strong written and verbal communication skills to deliver audit deliverables with quality.
• Effectively works independently, within the team and across various teams in a fast-paced environment to drive business results.
• Ability to break-down complex problems into components and solve utilizing complex thought, process and risk/control knowledge.
• Experience with data analytic tools, data visualization, key risk indicators (KRIs), key performance indicators (KPIs), information systems / technology, and scorecards / dashboards, etc. (preferred)
• Interest in working with data, interpreting results, analytic best practices and experience with data analytics tools and data visualization (preferred)
• Professional certification: CISA, CPA, CIA, CISM, CISSP, CCSP)) or other technology-focused certification (preferred)
• Relevant audit experience within the financial services industry (preferred)

Demonstrates expertise in IT and cybersecurity audit practices, with a strong understanding of regulatory and financial industry standards. Proficient in data analytics and visualization, capable of delivering high-quality audit deliverables and insights.

• IT Audit Experience
• Cybersecurity Audit Experience
• Data Analytics Tools
• Professional Certification (CISA, CPA, CIA, CISM, CISSP, CCSP)
• Regulatory Compliance Knowledge

• Control Theory Application
• Audit Lifecycle Knowledge
• Risk Assessment
• Audit Documentation
• Analytic Control Testing

• Strong Written Communication
• Strong Verbal Communication
• Independent Work
• Team Collaboration
• Problem-Solving

• CISA
• CPA
• CIA
• CISM
• CISSP
• CCSP

• Financial Services Industry
• Regulatory Expectations
• Banking Best Practices
• Audit Standards
• Internal Audit Methodology

• Data Visualization Tools
• Key Risk Indicators (KRIs)
• Key Performance Indicators (KPIs)
• Information Systems
• Dashboards