Audit Manager - Technology

Truist Bank•Raleigh, NC

11h•Onsite

About The Position

Truist Audit Manager is responsible for providing a leadership role in the delivery of high-risk, complex and value-added independent and objective risk-based internal audit assurance and advisory services. The Audit Manager will proactively coach junior team members by providing candid and constructive feedback.

Requirements

Bachelor’s degree in computer science, information systems, IT security, accounting, business or related field or equivalent education and related training or experience.
Six to eight years of banking, auditing or other relevant experience related to area of responsibility.
Strong knowledge, ability and expertise in the principles and practices of technology, cybersecurity, IT infrastructure, IT service management processes and IT industry trends.
Strong knowledge of IT General Controls (ITGCs), IT Application Controls (ITACs), and the System Development Life Cycle (SDLC).
Strong knowledge of IT, information security and Cloud management and control frameworks (COSO, COBIT, NIST, SOX, PCI DSS).
Strong knowledge, ability and expertise in audit and other areas of banking and financial services.
Strong understanding of risk management and process concepts.
Strong analytical, facilitation, and interpersonal skills.
Demonstrated ability to grasp and communicate the underlying concepts in complex information.
Demonstrated ability to identify and communicate root causes of problems.
Demonstrated ability to formulate and communicate solutions based on a synthesis of information.
Strong written, verbal and negotiating skills.
Demonstrated strong proficiency in computer applications and proven experience with tools such as Microsoft Office software products.
Strong project management and advisory skills.

Nice To Haves

Advanced degree.
Possess appropriate professional certification (Certified Information Systems Auditor (CISA), Certified Information Systems Security Professional (CISSO), Certified Internal Auditor (CIA)).
Possess knowledge of Truist Audit Services audit software and business specific software.
Experience assessing risks related to cloud adoption, data management, automation, artificial intelligence, digital transformation, and large-scale technology change initiatives.
Experience evaluating technology risk management practices, application architectures, cloud services, and emerging technologies.
Knowledge of automated controls, system integrations, APIs, and technology-enabled business processes.
Understanding of technology risk, operational resilience, data governance, and third-party technology risk management.
Ability to influence stakeholders across technology, risk, and business organizations.

Responsibilities

Serve as Engagement Manager of high risk and more complex audit engagements by planning, scoping and developing the test plan, including incorporating the use of data analytics.
Lead integrated business and technology-focused audits spanning applications, cloud environments, technology governance, data management, and modernization initiatives.
Effectively allocate resources and individuals in accordance with skills and schedules, to complete assignments within budget.
Set clear quality expectations based on Truist Audit Services standards and analyze/review process documentation to evaluate effectiveness and efficiency.
Assess technology processes, controls, and risk management practices to determine design and operating effectiveness.
Develop meaningful, relevant, and well-supported audit reports that align with Truist's risk appetite framework and present these reports to key department stakeholders.
Clearly articulate technology risks, root causes, business impacts, and sustainable remediation strategies.
Identify substantive and material issues that go beyond paperwork shortcomings. Ability to look beyond the obvious; finds solutions, not just problems.
Provide coaching and guidance in development of junior team members by taking an active role in training and mentoring.
Promote strong audit execution, methodology adherence, and technical development in technology risk disciplines.
Demonstrate effective challenge by providing deep subject matter knowledge industry related knowledge to support business partnership efforts.
Leverage expertise in business technology, cybersecurity, application controls, cloud technologies, data governance, and emerging technologies.
Manage timely and quality delivery of multiple tasks, including audits, projects and special assignments.
Provide advisory services, as necessary, in the implementation of new systems, processes and changes to existing systems, standards and procedures.
Ability to work independently while exercising judgement in risk-based assessments difficult or complex nature.
Demonstrate the ability to navigate ambiguity, evaluate emerging risks, and provide practical recommendations in a rapidly evolving technology environment.