IT Auditor III

Job Description

It’s about holding each other accountable.

Do you consider yourself to be detail-orientated? Passionate about understanding different processes and procedures? Are you described as someone who is approachable, respectful, and engaged when solving problems? If so, being an IT Auditor III at Frost could be for you.

At Frost, it’s about more than a job. It’s about having a flourishing career where you can thrive, both in and out of work. At Frost, we’re committed to fostering an environment that reflects our values and encourages team members to be the best they can be. In joining our adaptable, integrity-driven team, you’ll become part of Frost’s over 150-year legacy of providing unparalleled banking services.

As an IT Auditor III, you are our control system, you will be responsible for leading information technology audits designed to determine the adequacy of logical access controls, physical access controls, data input/output controls, system controls, information security, business continuity, and the degree of compliance with policies, laws and federal regulations as they relate to information technology. You’ll use your strong problem‑solving skills and communication skills to present your findings and create recommendations that align with our core values of integrity, caring and excellence.

You believe in constant improvement and want to use your insights to strive for impactful change.

• Analyze operations, internal controls, laws and regulations, Board level policies and understand the underlying effect each has on the organization
• Supervise or participate on engagements of various IT-related auditable entities to determine whether internal controls are adequate and operating properly, network, systems, and related data are appropriately safeguarded, IT services are available in the event of a major disruption, and compliance with Board policies, standards, selected laws and regulations as they relate to information technology
• Be responsible for engagements that are large, new or have emerging risks, and for assigned special projects
• Perform work in adherence to budgeted hours, assigned deadlines, department standards, and in-charge responsibilities
• Maintain direct communication with team members regarding status of assigned work and potential findings on engagements being supervised to ensure engagement objectives are accomplished, department standards are met, and the engagements are on schedule. Monitor communications from team members to audit clients
• Review work papers and reports, for all engagements supervised, for accuracy, completeness, and appropriateness of information and conclusions drawn to ensure engagement objectives are accomplished. Provide review comments to auditors and perform necessary follow‑up
• Submit completed work papers and detailed reports of audit findings and recommendations in a timely fashion and with the highest level of quality as to style and content
• Maintain direct ongoing communication with internal audit clients regarding the status of engagements and potential findings
• Present final engagement reports to line of business managers, under the direction of the Audit Team Leader
• Maintain periodic contact with line of business managers during the year to develop an atmosphere of cooperation and assistance
• Address and resolve problems encountered by less experienced auditors
• Continue professional development through self‑training (books, periodicals, memberships in professional groups, etc.) and participation in recommended courses, seminars, and in‑house training sessions
• Obtain additional advanced certifications as necessary to become proficient in specialized IT areas
• Adhere to the Standards for the Professional Practice of Internal Auditing
• Always act using Integrity, Caring, and Excellence to achieve all‑win outcomes

• Bachelor’s Degree – Management Information Systems, Information Technology, Information Security, or other relevant degree plan approved by management
• 4+ years of experience in IT auditing of various operating system platforms, network infrastructure, IT General Controls, database, and…