Audit Senior Manager, Info Technology

BOK Financial•Tulsa, OK

1d•Onsite

About The Position

The Audit Senior Manager, Info Technology is primarily responsible for executing the Information Technology (IT) Audit Plan and the independent enterprise-wide risk assessment framework on which the plan is based. The Audit Plan includes testing of new and existing information technology applications; procedures are designed to assess internal controls and compliance with bank regulation and internal policy. Audits include, but are not limited to Sarbanes-Oxley, SOC, Payment Card Industry (PCI), and Security and Privacy. The incumbent participates in significant system implementation initiatives.

Requirements

Extensive knowledge of high level programming languages, such as Visual Basic and PowerBuilder
Extensive knowledge of Windows NT, network administration and equipment including firewalls and routers
Extensive knowledge of Microsoft Office applications (Word, Excel, Access)
Extensive knowledge and understanding of data security issues
Understanding of the practical application of the Payment Card Industry Data Security Standard
Advanced knowledge of applicable Generally Accepted Auditing Standards, Public Accounting Oversight Board Standards, and bank regulatory auditing standards.
Advanced knowledge of applicable SEC rules & regulations, the Sarbanes-Oxley Act of 2002 and bank regulatory reporting requirements.
IS professional certification (CISA, MCSE, etc.) is required
Excellent analytical ability and organizational skills
Excellent oral and written communication skills
Excellent interpersonal skills and ability to work well with personnel at all levels throughout the organization
Strong leadership and team building skills
Ability to navigate through ambiguity, manage and coordinate multiple projects
Demonstrated ability to meet deadlines

Responsibilities

Initiate and oversee the planning of audit work and develop audit programs based on the assessed risk, discussions with management, industry/regulatory trends or requirements, and professional judgment.
Use understanding of IT risks, processes, and controls, including application controls, ITGCs, and security configuration controls within UNIX/Linux, AD, Oracle, SQL Server, VMware, and network devices to thoroughly test and document processes and results.
Determine work priorities, schedule work assignments, and direct and supervise the audit team's work to ensure high-quality work is delivered promptly.
Review audit work papers prepared by staff members to assess documentation of work performed, completeness of the audit work relative to audit risks and objectives of the area, and the appropriate identification of audit findings and recommendation of actions.
Be responsible for developing team members, including coordinating training and providing relevant feedback during and after each audit.
Plan, coordinate, and manage work on which the external auditors rely for year-end audit and reporting purposes.
Assist with determining annual department objectives and the annual audit plan, including preparing risk assessments and defining the timing and allocation of resources.