IT Auditor

Job Type

IT Auditor 

General Description

The IT Auditor (Staff) supports the execution of risk-based IT audits across systems, applications, infrastructure, and technology-enabled business processes within a regulated financial services environment. This role evaluates the design and operating effectiveness of IT general controls, application controls, and cybersecurity practices to assess whether risks are appropriately managed and regulatory expectations are met.

The ideal candidate is intellectually curious, analytical, and eager to develop expertise in technology risk, cybersecurity, and financial services regulations while working closely with experienced audit professionals.

Essential Duties and Responsibilities

• Participate in risk-based IT audits covering IT general controls (ITGCs), application controls, cybersecurity, cloud environments, and emerging technologies.
• Perform process walkthroughs, interviews, and control testing to assess the design and operating effectiveness of controls.
• Assist in identifying technology, cybersecurity, and operational risks and evaluate alignment with internal policies, industry standards, and regulatory requirements.
• Execute audit procedures using data analytics, automated testing techniques, and audit tools to identify control gaps or exceptions.
• Document audit work clearly and concisely in accordance with Internal Audit standards and departmental methodologies.
• Assist in developing audit findings, root cause analysis, and practical remediation recommendations.
• Collaborate with audit management to prepare audit reports and stakeholder communications.
• Stay current on technology trends, cybersecurity threats, and regulatory developments impacting the financial services industry.
• Support continuous improvement initiatives within the Internal Audit function, including automation, analytics, and methodology enhancements.

Supervisory responsibilities:

This job has no supervisory responsibilities.

Education

Experience

• 1–3 years of experience in:
• IT auditing, internal audit, external audit, or technology risk; or
• Hands-on IT, cybersecurity, infrastructure, or application support roles.
• Experience supporting or auditing financial institutions or other regulated environments is a plus

Certifications / Licenses (Preferred, not required)

Technical Knowledge & Skills

• Foundational understanding of IT control frameworks and concepts, including:
• IT General Controls (access, change management, operations)
• Application controls
• Familiarity with cybersecurity principles, including identity and access management, vulnerability management, and incident response.
• Exposure to or interest in industry frameworks such as:
• COBIT, NIST, ISO 27001, FFIEC, or SOC reports
• Working knowledge of modern technology environments, including:
• Windows, Active Directory, Microsoft 365
• Databases and basic SQL querying
• Cloud platforms (e.g., Azure, AWS, or GCP) – exposure preferred
• Experience or interest in data analytics and audit automation tools (e.g., ACL, Arbutus, Power BI, Python, or similar).
• Proficiency in Microsoft Office (Excel, Word, PowerPoint).

Region Locations

Hato Rey, SJ 

Popular Center

Values