Director Information Technology Audit

Are you looking for a high-visibility role running an IT Audit function, working closely with senior leadership, and building a top-notch risk based department?

A highly successful New York financial institution is seeking a Technology Audit leader with executive presence, leadership capability, and a hands-on, proactive approach to audit. This role offers the opportunity to join a highly cohesive team in a progressive organization.

What are people saying about this company?

• They care about their workers
• Lots of opportunities to learn and grow

Title: SVP & Director of IT Audit

Salary: $225,000 - $250,000 +Bonus

Location:
Manhattan, NY (Hybrid)

Job Description

• Lead complex IT and cybersecurity audits covering systems and application controls, technology infrastructure, IT processes, project management, and data integrity. Apply recognized frameworks and regulatory guidance, including ITIL, COBIT, FFIEC, and NYSDFS Part 500.
• Develop a dynamic, risk-based audit approach across cybersecurity, data protection, business continuity, physical and logical security, and other critical technology areas, ensuring alignment with evolving regulatory requirements and emerging risks.
• Lead the IT risk assessment process and development of the annual audit plan, incorporating industry standards, cybersecurity and privacy regulations, infrastructure risks, and emerging technologies.
• Stay ahead of technology trends, regulatory developments, and industry best practices to identify emerging risks and continuously strengthen the IT audit program.
• Execute high-value IT audits, identify key risks and root causes, evaluate mitigating controls, and deliver practical, value-added recommendations that strengthen the overall control environment.
• Leverage technology and data to perform and document audits in accordance with professional standards, ensuring clear support for audit procedures, findings, and conclusions.
• Oversee the audit issue follow-up process, evaluate remediation efforts, and determine whether corrective actions appropriately address identified risks.
• Contribute to broader Internal Audit initiatives, including reviews of new products, systems, technology implementations, and other strategic projects.

Qualifications

• 15+ years of progressive IT audit, technology risk, cybersecurity, or comparable experience, ideally within banking or financial services, with exposure to sophisticated information systems, network security, technology infrastructure, software development, and project management.
• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related discipline;
  Master's degree a plus.
• Professional certifications such as CISA, CISSP, CRISC, CIPP, CGEIT, or CISM strongly preferred.
• Deep knowledge of cybersecurity, privacy, IT risk, and technology controls, with the ability to help drive continuous improvement across the organization.
• Advanced understanding of information systems audit and key risk areas, including information security, logical and physical access, change management, business continuity/disaster recovery, and network technology.
• Strong knowledge of the IT regulatory environment, banking regulations, technology control frameworks, and professional internal auditing standards.
• Ability to quickly assess new and evolving risk areas, adapt to changing priorities, and develop a strong understanding of complex technologies and business processes.
• Excellent executive-level communication skills, with the presence and credibility to work effectively with senior management and Board-level committees.
• Strong technology orientation and ability to leverage appropriate tools and data to enhance audit effectiveness and efficiency.