Job Description

As the Internal Audit Technology Manager or Internal Audit Technology Senior Manager, you will report to the Bank’s Internal Audit Technology Lead. You are willing to be in the weeds of detailed testing and also contribute to the end-to-end audit from planning, testing, to delivering audit reports. You enjoy solving problems and provide a strategic point of view.

Key Responsibilities:

• You will support the team in scoping and executing risk-based technology audits (including information security and cybersecurity) and be responsible for testing of IT General Controls (ITGCs) and IT Automated controls (ITACs) over the Bank’s in-house production systems and third-party hosted applications.
• You will manage all phases of the audit including design assessment, operating effectiveness testing, identifying deficiencies, and working with Bank Management (including Engineering) on remediation efforts.
• You have deep experience performing end-to-end technology audits and an understanding of different frameworks (including ISO 27000 series, FFIEC IT Examination Handbooks, COSO, COBIT, and NIST).
• You can identify potential issues along with strategic solutions to the Bank’s Internal Audit Technology Lead and other members of our internal audit team. You have experience with financial, regulatory, operational risks and controls across the business and how they affect the technology audit program.
• You will work with our co-source partner and review and coach our extended team. You can work with stakeholders across the Bank t

Qualifications

You have:

• 6+ years of relevant experience in technology audits.
• CIA/CPA or CISA/CISSP qualification(s) is required.
• Experience working with Agile/ Dev-Ops Engineering departments and performing code reviews (e.g., Ruby, JavaScript, and Python).
• Experience designing and performing IT General Controls and IT Automated Controls.
• Experience with auditing of cloud solutions including AWS.
• Experience working in a regulated banking environment is preferred.
• Experience with third party SaaS and PaaS providers and the business and technology risks associated with these products.
• Willingness to work with teams to solve complex technology and business problems.