ABOUT THE ROLEA global financial institution is seeking an IT Audit professional to support technology audit coverage across infrastructure, applications, and cybersecurity environments. This role will participate in end-to-end audit engagements, assess technology risks and controls, perform continuous monitoring activities, and partner with stakeholders across technology, risk, compliance, and audit functions.
The position offers exposure to a large and evolving banking environment where technology audits are becoming increasingly complex and critical to the organization.
RESPONSIBILITIES- Execute audits covering IT infrastructure, applications, cybersecurity, and technology-related controls
- Assess the design, effectiveness, and sustainability of IT general controls, application controls, data management, and security controls
- Develop audit findings, recommendations, and reports for review with audit leadership and business stakeholders
- Perform issue validation and remediation testing for audit, regulatory, and self-identified findings
- Conduct continuous monitoring activities and support ongoing risk assessments across technology environments
- Partner with technology, compliance, risk management, legal, and data security teams to evaluate risks and control effectiveness
- Support audit planning activities and identify opportunities to enhance audit coverage and methodologies
- Maintain audit documentation and workpapers in accordance with professional standards and internal audit requirements
- Collaborate with global audit teams to share best practices and promote consistency across audit activities
- Assist with special projects and technology risk initiatives as needed
QUALIFICATIONS- Bachelor's degree in Information Technology, Information Systems, Computer Science, Finance, Accounting, or related field
- 5+ years of IT Audit, Technology Audit, Infrastructure Audit, Application Audit, or Cybersecurity Audit experience
- Experience within banking, financial services, fintech, or technology environments
- Strong knowledge of IT general controls (ITGCs), application controls, interface controls, data management, identity and access management, and information security controls
- Familiarity with technology risk frameworks and regulatory standards including NIST, FFIEC, NYS DFS 500, COBIT, or similar frameworks
- Understanding of audit methodology, risk assessment, internal controls testing, and workpaper standards
- Strong analytical, communication, and stakeholder management skills
- Ability to identify technology risks and provide practical recommendations for control enhancement
- Professional certifications such as CISA, CISSP, CISM, CIA, or related credentials are preferred
- Experience supporting infrastructure, application, and cybersecurity audits is highly desirable