IT Auditor

Job Description and Requirements

The IT Auditor will perform Information Technology (IT) engagements using a consultative approach designed to add value and improve the Credit Union's operations, assess IT risk exposure and recommend enhancements to IT business systems, processes, and controls to facilitate compliance with all applicable internal policies and procedures, insurance and vendor agreements, state and federal regulations, safety and soundness considerations, as well as improve the effectiveness of risk management, control, and governance processes. In addition, will perform duties in a manner which enhances the image and promotes department and Credit Union growth.

Essential Functions and Responsibilities:

• Complete assigned tasks and audit testing in accordance with Audit Operational Manual and established engagement procedures/guidelines. 

• Thoroughly document work performed with clear explanations to illustrate understanding of concepts as well as support the procedures performed and conclusions reached to reduce the need for rework; complete assigned tasks and audit testing in accordance with IIA Global Internal Audit Standards and established engagement procedures/guidelines.

• Participate in planning and executing of assigned audit programs designed to test the effectiveness and efficiency of key controls in mitigating IT risks; assist in facilitating IT audits/projects completed by external parties in support of executing the IT audit plan or to incorporate technical expertise when needed.   

• Exhibit effective time management skills for executing multiple and concurrent audit projects to achieve the scope, objective, and target deadline of each assignment.

• Conduct fact finding interviews with department managers to identify control weaknesses and opportunities for improvement in the current operating environment.

• Communicate findings with business unit personnel/managers with the ability to resolve conflicts in a professional and effective manner, and actively seek discussions with department level managers to promote strong departmental relationships.

• Synthesize information and use intuition and guidance from audit leaders to exercise judgment and critical thinking, including making decisions through independent verification.

• Conduct follow-up activities to ensure risks are mitigated to an acceptable level based upon the organization’s risk appetite.   

• All other duties as assigned (note: essential functions and responsibilities may change or new ones may be assigned at any time with or without notice).

Requirements:

• Associate's Degree

• Minimum of 1 year of relevant IT Audit or IT Security experience or 3 years of relevant IT Audit or IT Security experience in lieu of degree

• Exposure to frameworks such as NIST, ISO, COBIT, COSO, FFIEC, NCUA, CIS Top 20 Critical Security Controls, etc.

• Demonstrate basic audit/technical related skills to pursuing Certified Information Systems Auditor (CISA) or Certified Internal Auditor (CIA) or equivalent certifications

• Proficient in Microsoft Office products and Adobe Professional including ability to research, learn, and apply features not previously utilized

Preferred:

• Degree in Information Technology, Business, or Accounting

• Experience in one of the following: IT control analysis and development, IT risk assessment, information security and technology risk management

• Knowledge of applications and products, such as Windows OS, UNIX/AIX/Linux, Oracle/SQL Databases, Microsoft SQL Server, etc.

• An understanding of financial institutions is a plus

All qualified applicants will receive consideration for employment without regard to race, color, sex, sexual orientation, gender identity, religion, national origin, disability, veteran status, or other legally protected status.