Assistant Vice President IT Auditor, Internal Audit
About the position
The AVP IT Internal Auditor is responsible for assisting the VP IT Auditor in planning, performing, and reporting on a comprehensive risk-based Internal Audit Plan covering all business units, departments and functions enterprise wide. The AVP IT Internal Auditor is expected to maintain specialized technical expertise in information technology areas and to stay abreast of regulatory, industry, and other changes that affect the Company’s risk profile. The AVP IT Internal Auditor is expected to have a thorough understanding of audit methodologies and to develop audit workpapers in accordance with the Company’s Internal Audit Quality Assurance Improvement Program. The AVP IT Internal Auditor also provides guidance, direction, and mentoring to less experienced staff.
Responsibilities
• Assists the VP IT Auditor in identifying risk and controls; and in planning information technology related internal audits.
• Performs and /or leads audit evaluations to provide reasonable assurance that information technology on risk management, control, and governance systems are functioning as intended and will enable the Company to meets its information technology related objectives and goals.
• Ensures that audit objectives and testing results are adequately evaluated to conclude on the effectiveness of information technology related internal controls and develop conclusions on residual risks.
• Assesses data analytic practices and provides recommendations to bring efficiencies to audit testing.
• Prepares audit work papers in accordance with the Quality Assurance Improvement Program and ensures that sufficient evidence is documented to support related audit findings and conclusions.
• Reports risk management issues and information technology related internal control deficiencies via professionally written deliverables that are appropriate for all levels of management and governance.
• Provides support to the Company’s anti-fraud programs, including participation in fraud investigations and identification of information technology related fraud risks.
• Performs review of audit workpapers, supervises, and mentors staff as requested by the VP IT Auditor.
• Complies with the Institute of Internal Auditors (IIA) International Standards for the Professional Practice of Internal Auditing and the Internal Audit Code of Ethics.
• Attends requisite meetings in the absence or at the request of the VP IT Auditor.
• Obtains management responses and performs follow up inquiry and transactional testing to confirm remediation of audit findings.
• Participates in training and development programs to develop and maintain audit, process, or Company subject matter expertise.
• Responsible for complying with all of the Company’s internal control policies and procedures.
• Responsible for understanding and complying with all laws and regulations to which the Company is subject.
• Responsible for communicating problems in operations, noncompliance with the code of conduct, noncompliance with laws and regulations, policy violations, or illegal acts.
Requirements
• Bachelor’s Degree in accounting, Information Technology, or related field is required
• Seven (7)+ years audit experience in information technology, financial services, or public accounting is required.
• A minimum of one professional certification such as Certified Public Accountant (CPA), Certified Internal Auditor (CIA), Certified Information Systems Auditor (CISA), Certified Information Systems Security Professional (CISSP), or Certified Fraud Examiner (CFE) required.
• Demonstrable knowledge of information technology related internal control best practices and the Committee of Sponsoring Organizations of the Treadway Commission Integrated Framework
• Demonstrable knowledge of Federal Deposit Insurance Corporation Improvement Act and Sarbanes-Oxley Act requirements
• Experience in independently performing full audit work cycle, from planning to reporting
• Demonstrable knowledge and experience in Information Technology General Computer Controls and Systems and Organization Controls (SOC) review techniques
• Demonstrable knowledge of privacy laws, Payment Card Industry Data Security Standards, Federal Financial Institutions Examinations Council Handbooks, National Institute of Standards and Technology Cyber Security Standards, and other information technology related industry best practices
• Demonstrable understanding of information technology infrastructure environments, such as Windows and Linux server environment, database architecture, Networking, Cloud security, etc.
• Excellent communication skills, both verbal and written
• A track record of delivering exceptional results and problem solving skills
• Excellent organizations skills to understand and set priorities and monitor progress towards goals
Nice-to-haves
• Master’s Degree is preferred
Benefits
• Competitive Pay
• Bonus Target or Variable Pay Incentive Program
• Medical, Dental, and Vision
• 401(k) Plan with Company Match
• Short- & Long-Term Disability
• Wellness Programs
• Group Life and AD&D Insurance
• Paid Vacation, Sick Days and bank Holidays
• Employee Engagement Activities including Employee Appreciation Day, DEI Employee Resource Groups, Corporate Social Responsibility, Service Recognition
The AVP IT Internal Auditor is responsible for assisting the VP IT Auditor in planning, performing, and reporting on a comprehensive risk-based Internal Audit Plan covering all business units, departments and functions enterprise wide. The AVP IT Internal Auditor is expected to maintain specialized technical expertise in information technology areas and to stay abreast of regulatory, industry, and other changes that affect the Company’s risk profile. The AVP IT Internal Auditor is expected to have a thorough understanding of audit methodologies and to develop audit workpapers in accordance with the Company’s Internal Audit Quality Assurance Improvement Program. The AVP IT Internal Auditor also provides guidance, direction, and mentoring to less experienced staff.
Responsibilities
• Assists the VP IT Auditor in identifying risk and controls; and in planning information technology related internal audits.
• Performs and /or leads audit evaluations to provide reasonable assurance that information technology on risk management, control, and governance systems are functioning as intended and will enable the Company to meets its information technology related objectives and goals.
• Ensures that audit objectives and testing results are adequately evaluated to conclude on the effectiveness of information technology related internal controls and develop conclusions on residual risks.
• Assesses data analytic practices and provides recommendations to bring efficiencies to audit testing.
• Prepares audit work papers in accordance with the Quality Assurance Improvement Program and ensures that sufficient evidence is documented to support related audit findings and conclusions.
• Reports risk management issues and information technology related internal control deficiencies via professionally written deliverables that are appropriate for all levels of management and governance.
• Provides support to the Company’s anti-fraud programs, including participation in fraud investigations and identification of information technology related fraud risks.
• Performs review of audit workpapers, supervises, and mentors staff as requested by the VP IT Auditor.
• Complies with the Institute of Internal Auditors (IIA) International Standards for the Professional Practice of Internal Auditing and the Internal Audit Code of Ethics.
• Attends requisite meetings in the absence or at the request of the VP IT Auditor.
• Obtains management responses and performs follow up inquiry and transactional testing to confirm remediation of audit findings.
• Participates in training and development programs to develop and maintain audit, process, or Company subject matter expertise.
• Responsible for complying with all of the Company’s internal control policies and procedures.
• Responsible for understanding and complying with all laws and regulations to which the Company is subject.
• Responsible for communicating problems in operations, noncompliance with the code of conduct, noncompliance with laws and regulations, policy violations, or illegal acts.
Requirements
• Bachelor’s Degree in accounting, Information Technology, or related field is required
• Seven (7)+ years audit experience in information technology, financial services, or public accounting is required.
• A minimum of one professional certification such as Certified Public Accountant (CPA), Certified Internal Auditor (CIA), Certified Information Systems Auditor (CISA), Certified Information Systems Security Professional (CISSP), or Certified Fraud Examiner (CFE) required.
• Demonstrable knowledge of information technology related internal control best practices and the Committee of Sponsoring Organizations of the Treadway Commission Integrated Framework
• Demonstrable knowledge of Federal Deposit Insurance Corporation Improvement Act and Sarbanes-Oxley Act requirements
• Experience in independently performing full audit work cycle, from planning to reporting
• Demonstrable knowledge and experience in Information Technology General Computer Controls and Systems and Organization Controls (SOC) review techniques
• Demonstrable knowledge of privacy laws, Payment Card Industry Data Security Standards, Federal Financial Institutions Examinations Council Handbooks, National Institute of Standards and Technology Cyber Security Standards, and other information technology related industry best practices
• Demonstrable understanding of information technology infrastructure environments, such as Windows and Linux server environment, database architecture, Networking, Cloud security, etc.
• Excellent communication skills, both verbal and written
• A track record of delivering exceptional results and problem solving skills
• Excellent organizations skills to understand and set priorities and monitor progress towards goals
Nice-to-haves
• Master’s Degree is preferred
Benefits
• Competitive Pay
• Bonus Target or Variable Pay Incentive Program
• Medical, Dental, and Vision
• 401(k) Plan with Company Match
• Short- & Long-Term Disability
• Wellness Programs
• Group Life and AD&D Insurance
• Paid Vacation, Sick Days and bank Holidays
• Employee Engagement Activities including Employee Appreciation Day, DEI Employee Resource Groups, Corporate Social Responsibility, Service Recognition