IT Internal Auditor

About Patelco Credit Union

Patelco Credit Union is a not-for-profit credit union with a purpose to build financial health and wellbeing for our members. Since 1936, Patelco has grown from $500 in assets to over $9 billion in assets and is the 7th largest credit union in California, with branches throughout Northern California.

We are here for our members throughout all stages of life, meeting them with products, services, and new technology that help them plan purposefully for their futures and support a lifelong partnership with Patelco as their trusted financial advocate. As one team, we are committed to delivering service, empowering financial literacy, and making a positive difference in our members’ lives.

We believe work should be rewarding, challenging, and enjoyable. We are dedicated to creating a positive and supportive culture where team members can thrive.

Overview

The Staff IT Internal Auditor is responsible for supporting the planning, execution, and reporting of risk-based audits across Patelco Credit Union’s information technology and cybersecurity environment. This role evaluates the design and effectiveness of technology controls, risk management, and governance processes to determine whether technology risks are appropriately identified, managed, and monitored.

The Staff IT Internal Auditor performs audit procedures across areas such as information security, cybersecurity, identity and access management, IT operations, change management, cloud computing, system development, business continuity and disaster recovery, third-party technology risk, and other technology-related processes.

The role works collaboratively with Internal Audit team members and business and technology stakeholders to identify control weaknesses, assess associated risks, develop practical recommendations, and support compliance with applicable regulatory requirements, industry standards, and Patelco policies and procedures.

Responsibilities

• Perform risk-based IT and cybersecurity audits under the direction of IT Internal Audit management, including audits of information security, identity and access management, IT operations, change management, application and system development, cloud computing, infrastructure, business continuity and disaster recovery, third-party technology risk, and other technology-related areas.
• Assist in planning IT audit engagements, including performing preliminary risk assessments, understanding technology environments and business processes, identifying key risks and controls, defining audit objectives and scope, and developing audit procedures and testing methodologies.
• Evaluate the design and operating effectiveness of technology controls through interviews, walkthroughs, inspection of documentation and system configurations, data analysis, sampling, and other audit procedures.
• Assess IT general controls and technology processes, including logical access, privileged access, user provisioning and deprovisioning, change management, IT operations, system development, configuration management, backup and recovery, and related controls.
• Evaluate cybersecurity and information security controls designed to protect Patelco’s systems, applications, infrastructure, and member information, including controls related to access management, vulnerability management, security monitoring, network security, cloud security, and data protection, as applicable to assigned audits.
• Document audit procedures and testing results in accordance with Internal Audit methodology and professional standards, ensuring workpapers clearly support audit conclusions and findings.
• Identify control weaknesses, process gaps, and areas of non-compliance; evaluate the associated technology and business risks; and work with IT Internal Audit management to develop clear, practical, and risk-based recommendations.
• Assist in drafting audit findings and reports that clearly communicate the condition identified, applicable criteria, root cause, risk and impact, and recommended corrective action.
• Communicate audit observations and findings with technology and business stakeholders, obtain management responses where appropriate, and help resolve questions or differences regarding audit results.
• Perform follow-up testing of management corrective actions to determine whether identified audit issues have been appropriately remediated and supporting evidence is sufficient to close the issue.
• Use data analytics and technology-assisted audit techniques, where appropriate, to evaluate populations, identify exceptions or trends, and improve the effectiveness and efficiency of audit testing.
• Support assessments of technology governance and risk management, including IT policies and standards, technology strategy, third-party technology services, emerging technologies, and related governance processes.
• Apply relevant regulatory guidance and industry frameworks when conducting audits, including, as applicable, NCUA requirements and guidance, FFIEC IT Examination Handbook guidance, NIST Cybersecurity Framework, COBIT, CIS Controls, Global Internal Audit Standards, and other applicable standards or frameworks.
• Support regulatory examinations and external audit activities, as requested, by assisting with documentation, audit evidence, and responses related to IT and cybersecurity controls.
• Stay current on emerging technology risks, cybersecurity threats, regulatory developments, and industry practices, and incorporate relevant developments into assigned audit activities.
• Contribute to Internal Audit’s technology risk assessment and annual audit planning processes by providing observations regarding emerging IT and cybersecurity risks identified through audit work and ongoing professional development.
• Build effective working relationships with IT, Information Security, Risk Management, Compliance, and business stakeholders while maintaining the independence and objectivity required of Internal Audit.
• Understand and comply with applicable federal and state laws and regulations, Patelco Credit Union policies and procedures, and Internal Audit professional standards.

Qualifications

• Bachelor’s degree in Information Systems, Management Information Systems, Cybersecurity, Computer Science, Accounting, Finance, Business Administration, or a related field, or equivalent relevant experience.
• Minimum of 2.5 years of relevant experience in IT audit, technology risk, IT controls, cybersecurity assurance, internal audit, external audit, or a related technology risk and assurance function. Experience should include meaningful exposure to evaluating IT processes, risks, and controls rather than exclusively financial or operational audit experience.
• Working knowledge of IT general controls (ITGCs), including logical access, change management, IT operations, system development, and related technology control concepts.
• Working knowledge of information security and cybersecurity concepts, including identity and access management, vulnerability management, network security, cloud security, data protection, security monitoring, and technology resilience.
• Familiarity with IT governance, risk, security, and audit frameworks and guidance such as the NIST Cybersecurity Framework, COBIT, CIS Controls, FFIEC IT Examination Handbook, and Global Internal Audit Standards.
• Experience in a financial institution, credit union, banking environment, financial services organization, or other highly regulated industry is preferred.
• Familiarity with financial-services regulatory requirements and guidance, including NCUA and FFIEC, is preferred.
• Experience auditing or evaluating technology environments such as Microsoft Azure, Microsoft 365, Active Directory/Microsoft Entra ID, Windows or Linux environments, databases, networks, applications, cloud services, or other enterprise technology platforms is desirable.
• Experience using audit or GRC platforms such as TeamMate+, AuditBoard, Diligent, Quantivate, or similar solutions is desirable.
• Experience with data analytics, AI, and visualization tools such as Microsoft Excel, Power BI, Tableau, SQL, Python, or similar tools is desirable.
• Strong analytical and critical-thinking skills, with the ability to understand technology processes, identify control weaknesses, evaluate risks, and develop logical audit conclusions.
• Strong written and verbal communication skills, including the ability to translate technical risks and control issues into clear business language for technology and non-technology stakeholders.
• Ability to manage assigned audit responsibilities, maintain organized and complete audit documentation, meet established deadlines, and effectively manage multiple priorities.
• Relevant professional certification such as Certified Information Systems Auditor (CISA), Certified Internal Auditor (CIA), Certified Information Systems Security Professional (CISSP), Certified in Risk and Information Systems Control (CRISC), or equivalent is preferred. Candidates actively pursuing a relevant certification may also be considered.
• This role is based at Patelco Credit Union’s Dublin, California headquarters.

Target Base Pay

$92,028-$115,032 

Compensation at Patelco

Please note that the salary information is a general guideline only. Patelco Credit Union considers factors such as (but not limited to) scope and responsibilities of the position, candidate's work experience, education/training, key skills, internal peer equity, as well as market and business considerations when extending an offer. We offer a competitive total rewards package including a Short-Term Incentive (STI) program for all regular positions and a wide range of medical, dental, vision, financial, and other benefits.

We Offer

Physical Health:

• Exceptional Medical, Dental, Vision, and Life Insurance benefits

• Onsite fitness center at HQ and rewards for completing wellness related activities 

Financial Health:

• Competitive compensation packages with bonus opportunity
• 401(k) with 3% Safe Harbor and 5% employer match
• Discounts on loan products

• Tuition reimbursement

Emotional Health:

• Employee Assistance Program (EAP)

• PTO for part-time and full-time positions

• Paid holidays

Personal Development:

• On-the-job training and skills development
• Internal transfer opportunities for career growth
• Volunteer work

Flexible work arrangements available for specific positions

Patelco Credit Union is an Equal Opportunity Employer including individuals with disabilities and protected veterans