Audit Manager, IT Infrastructure
The individual in this role will be responsible for planning and performing internal audits of technology areas, with a primary focus on IT infrastructure in support of integrated audits. The role involves examining and evaluating internal controls in key technology risk areas to ensure compliance with internal policies, as well as applicable rules, laws, and regulations such as FFIEC guidance.
Key Responsibilities:
Perform audits related to financial services applications, including leasing and lending, banking, trading, settlement, anti-money laundering (AML), and sanctions screening.
Evaluate internal controls to ensure compliance with policies, laws, and regulations.
Develop audit programs and execute audit fieldwork, including system documentation, evaluations, interviews, and technical analysis.
Propose corrective measures to strengthen internal controls, policies, procedures, and address weaknesses identified during audits.
Prepare clear and concise audit workpapers and reports, summarizing audit scope, methodology, and key findings.
Conduct planning and closing meetings with internal audit and relevant department management.
Communicate audit results to both audit management and client management effectively.
Work both independently and as part of a team to deliver strong audit results while maintaining professional independence and judgment.
Oversee and report on key audit projects to internal audit management.
Qualifications and Skills:
7-10 years of IT Audit experience, preferably within a financial institution. A strong understanding of risks and controls within a technical environment is essential.
Bachelor’s degree in MIS or a related computer field; certifications such as CISA, CIA, or other relevant credentials are preferred.
Experience identifying and testing key risks and controls for IT applications in areas such as input validation, batch processing, access controls, change management, and systems documentation.
Knowledge of core financial services business processes such as leasing, lending, banking, trading, settlement, and/or AML and sanctions screening is preferred.
Experience with cloud-based applications is a plus, but not required.
Ability to audit non-technical areas, including IT governance, project management, and systems development.
Understanding of data management, models, records management, privacy, and related audit experience is beneficial but not required.
Ability to multitask effectively and work within a team environment.
Knowledge of federal and state laws, regulations, and FFIEC guidance, and the ability to interpret and apply them.
Strong understanding of audit techniques, internal controls, and audit principles, with the ability to manage audits from planning through to closing.
Critical thinking, strong analytical, and organizational skills.
Strong oral and written communication skills, including the ability to write clear and concise audit recommendations and reports.
Proficiency in Microsoft Office Suite (Outlook, Excel, Word, PowerPoint).