Staff Auditor – Cybersecurity

Staff Auditor – Cybersecurity

Requirements

• Bachelor’s degree; 4 additional years of related experience beyond minimum required may be substituted in lieu of a degree.
• 2 years of audit experience in a financial services or technology/security environment.
• Experience applying audit, risk, or compliance acumen in a business/professional environment.
• Experience effectively communicating Controls with business partners.
• Experience utilizing Microsoft Office products to complete work assignments.
• Ability to independently follow and work through business Audit plans.
• Knowledge of documenting auditing techniques and assessments.
• Knowledge of financial services regulations (e.g., Office of the Comptroller of Currency’s Heightened Standards).
• Basic knowledge of IT general controls, Technology infrastructure management and platforms (e.g., mainframe, midrange, distributed), and Network architecture and security (e.g., network segmentation, firewalls, proxies, encryption protocols, endpoint protection).

Responsibilities

• Independently performs IT/IS audit program assignments timely and expertly.
• Aligns with Auditor-in-Charge (AIC) to complete the annual audit plan and audit priorities for assigned area.
• Independently and accurately tests less complex IT/IS applications, and/or IT general controls (ITGC) and documents results.
• Identifies IT/IS control deficiencies in testing, discusses with IT/IS Auditor-in-Charge (AIC) and/or Audit management and establishes understanding on how to for assigned work.
• Reviews, analyzes, and interprets data collected from multiple sources to ensure valid conclusions are drawn during testing. Analyzes information and standard business practices to make sound judgements and recommendations.
• Attends and participates in team audit activities such as planning and scoping for the IT/IS business. Understands, participates, and assists the AIC during walkthroughs, review of risk assessment and testing for assigned IT/IS areas of responsibility applying critical thinking.
• Completes audit documentation techniques including IT/IS key risks and controls alignment to audit test objectives and conclusions; is accountable for completing documentation within quality standards.
• Communicates effectively and shares findings, with AIC, team members, and may present to IT/IS business leaders.
• Provide updates to the engagement level risk & control matrix and other audit documentation as deemed appropriate by AIC or team leadership.

Preferred Qualifications

• Demonstrated basic knowledge and skills in the specialized field of IT auditing including, but not limited to, IT general controls, Cloud computing, Cyber incident management, etc.