IT Assistant General Auditor

Job Type

IT Assistant General Auditor 

General Description

Responsible for oversight of the Audit Division's operations. Supports General Auditor to develop, manage, promote, and integrate all aspects of the assigned area to meet both client needs and organization objectives. Provides direction and guidelines to employees. Primary job responsibilities include monitoring the audit and assurance project management, resource management and the ability to support a culture of innovation and continuous improvement by implementing efficiency ideas into processes and policies.

Essential Duties and Responsibilities

Strategic Oversight & Leadership:

• Lead and oversee the IT and Cyber audit function, including quality assurance aligned with IIA Standards
• Monitor progress against the annual IT audit plan across all technology domains
• Serve as a subject matter expert to the General Auditor, executive management, and the Audit Committee on IT governance, technology risk, and cybersecurity

Technical Governance & Execution:

• Provide strategic oversight of IT and Cyber audit engagements, including scoping, risk assessment, and control evaluation
• Provide oversight and quality review of IT-related control testing
• Oversee the adoption of audit AI, data analytics tools, and other emerging technologies

Stakeholder Management & Reporting:

• Assist the General Auditor in preparing Audit Committee presentations and responses to regulatory examinations
• Represent Internal Audit in technology governance forums and risk committees
• Monitor IT audit metrics, key performance indicators, and performance targets

People Leadership & Development:

• Oversee IT audit staffing, resource planning, and capacity management
• Lead performance evaluation, mentoring, and professional development for IT audit teams
• Drive innovation, process improvement, and enhancements to audit methodology

Education

Experience

Seven (7) or more years of experience overseeing, planning, developing, and executing IT and Cyber audits, reviews, and advisory engagements. 

Seven (7) or more years of experience in public accounting, internal audit, or the financial services industry, with an emphasis on IT and Cyber risk.

Demonstrated leadership experience managing audit teams, including hiring, performance management, coaching, and mentoring

Certifications / Licenses

• Certified Information Systems Auditor (CISA) - Required
• Additional ISACA certifications or certificates - Preferred
• Certified Internal Auditor (CIA) - Preferred
• ISC2 certifications or certificates - Preferred

Other Qualifications

Regulatory & Framework Knowledge

• Deep understanding of the IIA Global Internal Audit Standards
• Strong knowledge of COBIT as an IT governance framework
• Expertise in NIST Cybersecurity Framework and NIST SP 800 series
• Comprehensive understanding of the FFIEC IT Examination Handbook
• Knowledge of ISO 27001/27002 information security standards
• Understanding of SOX requirements, ITGCs, and application controls

Banking, Risk, and Regulatory Environment:

• Strong knowledge of regulatory expectations issued by the Federal Reserve, OCC, FDIC, and FFIEC
• Understanding of data privacy regulations (GDPR, CCPA, GLBA)
• Strong understanding of internal auditing, risk management, and the financial services control environment, including the ability to interpret financial information and related governance expectations

Technical & Emerging Technology Understanding:

• Thorough knowledge of cybersecurity best practices and emerging threats
• Understanding of emerging technologies, including AI/ML, robotic process automation, blockchain, and quantum computing
• Understanding of cloud service models and shared-responsibility concepts from a risk and control perspective
• Comprehensive understanding of IT control environments, information security standards, best practices, and applicable laws and regulations

Leadership & Soft Skills

• Exceptional leadership, people management, and team-building skills
• Excellent bilingual communication skills in English and Spanish, both verbal and written, with the ability to communicate effectively with technical and non-technical audiences
• Strong executive presence and presentation skills for management, the Audit Committee, regulators, and other stakeholders
• Strategic thinking, sound judgment, business acumen, and strong analytical skills to identify issues, evaluate alternatives, and make effective decisions
• Strong project and program management skills, including the ability to prioritize competing demands, work independently, adapt to changing circumstances, perform under pressure, and meet deadlines
• Outstanding interpersonal and organizational skills to build effective relationships, operate across all levels of management, and respond proactively to stakeholder needs

Technical Skills & Tools:

Proficiency in audit analytics, reporting, and data interrogation tools, including ACL, Arbutus/IDEA, SQL, Python, Power BI, and Tableau

Proficiency in Microsoft Office, Microsoft 365, and collaboration tools used to support audit execution, reporting, and communication

Additional Requirements

• Excellent analytical skills to identify situations, look for alternatives and make good decisions.
• Excellent communication skills in English and Spanish both verbally and in writing.
• Knowledge and skills in the analysis of financial information and accounting pronouncements.
• Must be able to work under pressure and meet deadlines, while maintaining a positive attitude
• Ability to work independently and to carry out assignments to completion within parameters of instructions given, prescribed routines, and standard accepted practices.
• Ability to operate at all levels of management, with excellent verbal, written and presentation skills (in both English and Spanish).
• High degree of commitment, ability to adapt to new situations and work under pressure.
• Strong quantitative, research and analytical skills.
• Ability to analyze data and create succinct presentations tailored to each audience; attention to detail with excellent time management and multitasking abilities.
• Skills to manage projects independently, develop and maintain good interpersonal relationships, anticipate needs, present alternatives to solve situations and provide continuity and follow-up on matters.
• Excellent organizational skills to establish priorities, anticipate challenges and work with multiple tasks simultaneously under minimum supervision.

Values