IT Auditor II

Are you ready to make an impact at DTCC? 

Do you want to work on innovative projects, collaborate with a dynamic and supportive team, and receive investment in your professional development? At DTCC, we are at the forefront of innovation in the financial markets. We're committed to helping our employees grow and succeed. We believe that you have the skills and drive to make a real impact. We foster a thriving internal community and are committed to creating a workplace that looks like the world that we serve.

• Competitive compensation, including base pay and annual incentive
• Comprehensive health and life insurance and well-being benefits, based on location
• Pension / Retirement benefits 
• Paid Time Off and Personal/Family Care, and other leaves of absence when needed to support your physical, financial, and emotional well-being.
• DTCC offers a flexible/hybrid model of 3 days onsite and 2 days remote (onsite Tuesdays, Wednesdays and a third day unique to each team or employee). 

As part of the Internal Audit Department, the IT Auditor II is predominantly focused on the execution of audit planning, fieldwork and assisting reporting and is given the opportunity to lead selected meetings. The primary measure of success is identifying meaningful potential issues about the design and effectiveness of controls and creating reliable documentation to support the audit conclusion. The IT Auditor II must manage auditee relationships, be a good team player, and take accountability for their personal growth and professional development.

• Strategic Control Impact: Identifies substantial issues in which controls are not accurately designed or are not operating effectively. Assesses the risk and control environment for processes within coverage areas. Validates the remediation of issues and completion of action plans under the mentorship of a supervisor. Understands the financial services industry and risk and control environment for coverage areas and identifies new risks.
• Audit Execution: Assists IT Audit Manager or IT Senior Audit Manager with the execution of audit planning, fieldwork, and reporting. Completes risk-focused fieldwork on time and within the allocated budget, advising the auditor in charge promptly of issues that arise or when budgets or timelines are at risk. Writes and speaks clearly and concisely and can demonstrate detailed knowledge of that area being audited. Understands and performs root cause analysis for issues; possesses and demonstrates a strong understanding of audit techniques.
• Quality Process Demonstrates a solid understanding of our policies & procedures, particularly work paper documentation standards. Independently prepares work papers that fully align with IAD policies and procedures. Participates in continuous improvement initiatives. Aligns risk and control processes into day-to-day responsibilities to supervise and mitigate risk; escalates appropriately.

**NOTE: The Primary Responsibilities of this role are not limited to the details above. **

• Minimum of 2-4 years of related experience
• Bachelor's degree preferred, preferably with a technology-related major, or equivalent experience.

• Previous internal or external audit experience
• Strong analytical and problem-solving skills
• Strong commitment to partnership and collaboration
• Strong written and oral communication skills
• Certifications related to the candidate’s coverage responsibilities are beneficial, but not required, such as Certified Information Systems Auditor (CISA), Certified in Risk and Information Systems Control (CRISC), and Certified Information Systems Security Professional (CISSP).
• Aligns risk and control processes into day-to-day responsibilities to supervise and mitigate risk; calls out appropriately
• Capable of identifying, assessing and advising on risks for large-scale technology projects, IT general controls and completing IT process audits (e.g., SDLC, Organizational Change, Logical Security, Business Continuity/Disaster Recovery and Incident/Problem Monitoring).
• Proficiency in auditing infrastructure components is a plus (e.g., Mainframe, Unix/Linux, Windows).

The salary range is indicative for roles at the same level within DTCC across all US locations. Actual salary is determined based on the role, location, individual experience, skills, and other considerations. We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, sex, gender, gender expression, sexual orientation, age, marital status, veteran status, or disability status. We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.