Audit Manager - Info Technology

Overview

Req : 77301

Location: Tulsa
-TUL, Oklahoma City
-OKC

Areas of Interest: Internal Audit;
Audit;
Digital Technology;
Enterprise Data;
Information Security;
Information Technology;
Infrastructure;
Project Management;
Risk Management;
Software Development

Pay Transparency Salary Range: Not Available

Final date to receive applications: 12/26/2025

BOK Financial Corporation Group includes BOKF, NA; BOK Financial Securities, Inc. and BOK Financial Private Wealth, Inc. BOKF, NA operates Trans Fund and Cavanal Hill Investment Management, Inc. BOKF, NA operates banking divisions:
Bank of Albuquerque;
Bank of Oklahoma;
Bank of Texas and BOK Financial.

Bonus Type BOKF Performance Plan (D02)
Summary

Assure, advise and add value to our team! Looking for a job where a passion for innovation and opportunities for growth are valued and a culture of teamwork exists? Look no further.

The Audit Manager - Info Technology provides an objective evaluation of internal controls, risk management and governance processes through the assessment of operational efficiency, financial reporting, and compliance with legal and regulatory standards as well as detecting, investigating and deterring all types of fraud. In executing the responsibilities of this position, the incumbent collects, examines and analyzes data for audits of existing and new Information Technology (IT) which, in most cases, will have the highest degree of complexity and which require a high order of analytical, interpretive, and/or constructive thinking in varied situations covering multiple areas of the Bank.

The incumbent’s work incorporates auditing standards, guidance and frameworks issued by the Public Company Accounting Oversight Board (PCAOB) and the Committee of Sponsoring Organizations of the Treadway Commission (COSO), as well as state and federal banking regulatory agencies, including, but not limited to the Office of the Comptroller of the Currency and the Federal Reserve.

Assure, advise, and add value is our motto. We are a department of approximately 45 team members across specialized teams. Collaboration and inclusiveness are the glue that keeps the department together. Flexibility and work-life balance add to the enjoyment of coming to work every day. Employees lead with heart and give back to our community in multiple ways. Your integrity, honesty, and taking responsibility for your actions will set you up for success.

The management team focuses on providing well-rounded training, not only audit but technical and soft skills to enable you for success in this role and others.

• Collect, examine, analyze, and review documentation. Study policies and procedures relative to existing and new IT audits. Review business processes, control frameworks, and business units across the company.
• Use understanding of IT risks, processes, and controls, including application controls, ITGCs, and security configuration controls within UNIX/Linux, AD, Oracle, SQL Server, VMware, and network devices to thoroughly test and document processes and results.
• Work independently to document audit results including internal control deficiencies and other audit issues.
• Mentor and review the work of others to ensure audit engagements and reports are completed timely, effectively and accurately.
• Plan audit engagements independently or with limited guidance from manager.
• Collaborate with assigned audit team and lead a significant role in the presentation of the audit plan, post-audit follow-up, recommendations to management and leading exit interviews with appropriate bank personnel.
• Perform special projects as directed by management and research current industry, financial reporting, and regulatory issues to build upon knowledge base and develop a basis for identifying trends.

This level of knowledge is normally acquired through completion of a Bachelor’s Degree in Computer Science or other IT-related discipline and 7+ years information technology-related experience.

• Advanced knowledge and understanding of IT risks, processes, and controls, including application controls, ITGCs, and security configuration…