Lead Independent Testing Officer

• Lead complex initiatives executing moderate to high risk or complex review activities and engagements with subject matter expertise in technology, information security, and compliance and operational risks
• Lead assessments of the adequacy and effectiveness of policies, procedures, processes, systems, and control environment
• Ensure teams execute testing and validation in an effective manner with high quality, according to IT&V standards and other applicable policies
• Communicate emerging risks with broad impact and act as key participant in large scale planning for Independent Testing
• Determine the engagement scope and approach, assess and escalate findings, provide credible challenge to remedial actions, and follow through on reporting and resolution per procedural guidance
• Provide thoughtful credible challenge internally and to LOBs, cross-enterprise and across other corporate risk programs
• Develop and design methodologies and standards for review activities across the enterprise in alignment with the risk management framework
• Review and research complex development and design of methodologies and standards for review activities companywide in alignment with the risk management framework
• Ensure effective and appropriate testing, validation, and documentation of review activities for risk programs, risks and controls
• Make decisions in complex situations requiring solid understanding of risk management framework and the risk and control environment that influence and lead enterprise testing to meet deliverables and drive new initiatives
• Collaborate and consult with Audit, Legal, external agencies, and regulatory bodies to resolve risk related topics
• Lead project teams and mentor individuals

5+ years of Independent Testing experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education

• Testing controls or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education
• Audit experience at Big Four/super-regional public accounting firm with experience in IT General Controls, automated controls, business process, data, regulatory, or compliance audits and technology and consumer compliance experience preferred
• Knowledge and understanding of complex regulatory/compliance issues and potential solutions
• Knowledge and understanding of audit methodologies and tools that support audit processes
• Strong ability to research, trend, and analyze large sets of data to create efficient and comprehensive testing strategies
• Knowledge of analytics and presentation tools such as SQL, Tableau, SAS, Power BI, Alteryx, etc
• Experience gathering, analyzing, and interpreting large datasets
• ability to retrieve data from various information systems
• Strong ability in developing and reviewing testing strategies and methodologies
• evaluating the adequacy and effectiveness of policies, procedures, processes, initiatives, products and internal controls
• and identifying issues
• Experience with technology, data, and program level control testing, including performing and reviewing the work of less experienced team members
• Experience drafting executive summary reports
• Ability to articulate complex concepts in a clear manner
• Outstanding problem solving and decision-making skills
• Proficient at considering a broad range of issues in making decisions and holds oneself accountable for delivering on commitments and renegotiating when needed
• Ability to lead and execute on complex projects, prioritize work, meet deadlines, achieve goals, and work under pressure in a dynamic and complex environment
• Strong presentation, documentation, and organizational skills
• Ability to perform assigned tasks independently from start to finish within the allotted time
• Ability to take on a high level of responsibility, initiative, and accountability
• Advanced Microsoft Office (Word, Excel, Outlook, and PowerPoint)
• Demonstrated success with influencing business units to identify, formulate and implement processes/procedures to mitigate risk
• Demonstrated negotiation skills, especially with difficult topics when partnering with lines of business and technology. This includes the willingness and ability to question decisions, understand direction and escalate issues, where necessary
• Prefer one or more of the following certifications: Certified Information Systems Auditor (CISA), Certified Internal Auditor (CIA), Certified Public Accountant (CPA), Certified Regulatory Compliance Manager (CRCM), Certified Risk and Compliance Management Professional (CRCMP), Certified Risk Professional Program (CRP), Certified Information Systems Security Professional (CISSP), Certified in Risk and Information Systems Control (CRISC)

• Health benefits
• 401(k) Plan
• Paid time off
• Disability benefits
• Life insurance, critical illness insurance, and accident insurance
• Parental leave
• Critical caregiving leave
• Discounts and savings
• Commuter benefits
• Tuition reimbursement
• Scholarships for dependent children
• Adoption reimbursement