IT Audit Manager

• Lead execution of the integrated audit process
• demonstrate depth and breadth of knowledge and understanding across multiple businesses or develop knowledge in a critical subject matter area
• demonstrate comprehensive knowledge and understanding of the financial, operational, technical, and regulatory environment across multiple businesses or develop excellent subject matter knowledge in critical areas of the business
• write opinions reflecting relevant facts that lead to logical conclusions
• escalate significant risks and loss exposures to appropriate levels of management
• ensure documentation and reporting are ready for review by managers and more experienced managers
• demonstrate credible challenge
• evaluate and provide appropriate solutions for complex problems
• lead multiple concurrent projects that are generally moderate to large in size and moderate to high in complexity
• identify and assess key risks and controls and develop effective test plans for engagements as assigned with limited guidance
• present audit results in an objective and unbiased manner
• exhibit appropriate judgment regarding issue notification, issue draft findings to client management, and draft final audit reports
• develop and maintain excellent business relationships within Internal Audit and with teams companywide

5+ years of Audit, Risk experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education

• 5+ years of increasing responsibilities within IT audit, preferably at a large bank or Big 4 accounting firm
• proven experience auditing or assessing cybersecurity controls specifically related to Identity and Access Management
• 2+ years of hands-on experience with Identity and Access Management tools (e.g., SailPoint, CyberArk, Hashicorp, Azure AD)
• strong understanding of regulatory requirements and industry frameworks (NIST, ISO 27001, FFIEC, COBIT)
• a BS/BA degree or higher
• professional certifications such as CISA, CIAM, CISSP, CRISC, or CIA
• ability to effectively communicate complex security concepts to stakeholders at all levels
• experience leading in a highly formal audit environment, including preparation of formal test of design and test of effectiveness work-papers, sample selection through use of formal sample selection tools, process and control flow-charting, and audit methodology compliance
• experience with Issue Validation and Remediation
• excellent verbal, written, and interpersonal communication skills

• Health benefits
• 401(k) Plan
• Paid time off
• Disability benefits
• Life insurance, critical illness insurance, and accident insurance
• Parental leave
• Critical caregiving leave
• Discounts and savings
• Commuter benefits
• Tuition reimbursement
• Scholarships for dependent children
• Adoption reimbursement