IT Auditor

Overview

Internal Audit at Bessemer is an independent assurance and risk management function, reporting directly to the Audit Committee of the Board, with the mission of protecting the firm and enhancing its control environment. The Technology Audit Team partners with Bessemer’s businesses to provide assurance and advisory services for all technology-related functions of the firm including application delivery, technology infrastructure, information security and integrated business technology.

The Information Technology Auditor is responsible for executing risk-based IT audits to assess the design and operating effectiveness of technology and information security controls. The position requires strong analytical skills, effective communication, and the ability to collaborate with stakeholders across technology and business areas. The IT Auditor will leverage industry frameworks and regulatory guidance to evaluate technology risk and communicate effectively, while maintaining clear documentation and demonstrating sound professional judgment.

Specific responsibilities of the Information Technology Auditor include:

• Planning – Identify and evaluate key processes, risks and controls; contribute to preparation of audit programs and other procedures to test controls.
• Fieldwork – Timely execution of stakeholder interviews, documentation (e.g., process narratives, walkthroughs) and testing. Assess the design and operating effectiveness of controls.
• Findings and Issues – Identify and document potential findings and issues. Discuss with relevant stakeholders and assess potential level of risk and impact. Identify root cause of issues.
• Reporting – Participate in drafting audit report, including overall risk evaluation of control environment, detailed audit findings and issues.
• Coordination and Collaboration – Coordinate and communicate effectively with audit and client contacts to deliver work in a professional and timely manner.
• Technology Risk and Control Framework – Leverage technology and financial industry regulations and guidance to assess risks and control design and operating effectiveness.
• Documentation – Document work accurately, clearly and concisely and in accordance with audit methodology to support evaluation of risk and control effectiveness.
• Communication – Deliver clear, timely and balanced written and verbal communications to peers, supervisors, and clients.
• Critical Thinking – Demonstrate critical thinking by gathering, analyzing, questioning and sharing perspectives on areas under review.
• Training and Development – Build awareness of technology trends, risks and controls through personal curiosity, training and networking.

• Bachelor’s degree in computer science, information systems, or other relevant subject areas
• 3-5 years of experience with information technology in Internal Audit, IT operations, IT Risk & Compliance, or Information Security, preferably within the financial services industry
• Technology auditing certification (e.g. CISA) required, or the candidate must commit to obtaining CISA certification within 18 months of hire.
• Working knowledge of one or more of the following: general computer and application controls, information security principles, software development lifecycle, business continuity and disaster recovery, and other technology areas including information technology governance standards and industry best practices (e.g., FFIEC, NIST, CIS, MITRE, OWASP, etc.)
• Effective organization and documentation skills (write succinct and cohesive process narratives, issue statements, findings and action plans), as well as ability to prioritize multiple projects
• Excellent communication (verbal, written, listening) and interpersonal skills
• Healthy professional skepticism along with excellent critical thinking and problem-solving skills
• Ability to build and maintain effective relationships with peers and business partners

Bessemer Trust is a family office, overseeing more than $200 billion in assets for over 3,100 individuals and families of substantial wealth. Its more than 1,200 employees are singularly focused on private wealth…