JOB DESCRIPTION

A leading savings and loans company is looking to hire an IT auditor.

This position will lead and participate in audits and consulting projects, under the oversight of the Chief

Internal Auditor, with the objective of analyzing and assessing the company’s information technology

infrastructure and cybersecurity and execute risk-based internal audits utilizing agile auditing principles.

Serves as the internal audit team’s subject matter expert in identifying IT and cybersecurity risks and

recommendations for management to strengthen operations.

A successful candidate will be in charge of:

• Identify risks and controls of the IT department


• Conduct audits and ensures audit documentations (narratives, process flows, risk assessments,


• programs, workpapers, etc.) and reports, capture the procedures performed, support conclusions


• reached, identify internal controls and control weaknesses, and provide value-added


• recommendations.


• Identify areas of improvement and provide appropriate recommendations/solutions to complex


• problems from assessments.


• Audit computer systems to minimize risks.


• Participate in technology audits and technology project reviews.


• Maintain and revise existing compliance programs related to IT audits.


• Builds relationships with audit clients to ensure communication and delivery of value-added


• services.


• Delivers reports to communicate observations, issues, risks, and recommendations


• Assists the Chief Internal Auditor with the internal audit department’s annual audit plan and


• IT/Cybersecurity risk assessment


• Serves as a subject matter expert by providing direction and feedback outside of normal audit


• procedures


• Conducts and/or provides assistance in investigations related to ethics, fraud, and/or other issues


• Accountable for other duties as assigned


• Education, training and experience


• Bachelor’s Degree in Computer Science, Management Information Systems, or another IT Business related field is required.


• 4+ years of experience in a related position required (with at least 2 years in internal or external


• auditing)


• Prior knowledge and experience in the following areas is preferred.


• Applying IT and Cybersecurity control frameworks including ISO 27001, etc. o System and software applications and related controls including Active Directory, SAP(ERP) roles, and profiles, o Data analysis and visualization tools such as MS Office, ACL, etc. o Networking infrastructure and data center designing including Cloud technology. o Industrial computer control systems and devices including IoT, Programmable Logic Controllers (PLC)

Licenses and/or certifications

• Certified Information Systems Auditor (CISA) or


• Certified Information Security Manager (CISM) or


• Certified Information Systems Security Professional (CISSP) or


• Acquire certification within two (2) years of beginning employment.