Director – Internal Audit Information Technology

TDECU•Post Oak, MO

1d•Hybrid

About The Position

The Director of Internal Audit Information Technology will be responsible for planning, executing, and overseeing all aspects of IT audit activities within the credit union. This role includes primarily performing comprehensive IT audits, managing the oversight of IT audits conducted by external consulting audit firms, and ensuring compliance with industry regulations and best practices. The IT Director will work collaboratively with executive management and other departments to provide assurance on the effectiveness of IT-related controls, identify opportunities for improvement, and mitigate risks related to information technology.

Requirements

Bachelor’s Information Technology, Computer Science, Accounting or Business from an accredited university is required.
Certified Information Systems Auditor (CISA) required.
Ten years of experience as an information technology internal auditor managing audit engagements in a financial institution or a related organization.
Senior level audit management experience.
Seven to Ten years of supervisory/ managerial experience.
Proficiency in IT COBIT, NIST Cybersecurity Framework (CFS), Information Security Management, in-depth knowledge of internal audit standards, procedures and techniques required for performing engagements and best practices.
Strong proficiency in IT audit methodologies, IT risk management, cybersecurity, and regulatory requirements for financial institutions.
Exceptional analytical, problem-solving, and decision-making abilities.
Strong system data analytic knowledge and proficiency.
Strong ability to present complex IT issues to non-technical stakeholders.
Strong in using audit workpaper management tools and IT audit frameworks.
Strong interpersonal, leadership, and communication (both written and oral) skills.
Ability to engage and influence senior executives, establish and maintain collaborative partnerships, and provide thought leadership to strategic decisions.
Excellent planning and operational deployment skills; ability to translate vision, strategy, and business requirements into clear actionable goals.
Strong strategic and process thinking abilities; takes a broad perspective and makes connections.
Proactively looks for opportunities, solutions, and process improvements. Manages projects, milestones and tasks, resources, and risks/dependencies.
Ability to drive change, establish priorities, and integrate work in a fast-paced environment, and achieve results.
Demonstrate strong technical expertise, leadership skills, and strategic thinking to enhance IT audit function.
Ability to work as a leader or participant of large, cross-functional teams or as an individual contributor.
Unquestionable business and personal integrity and values congruent with those of the organization.
Results-oriented with the ability to direct or manage multiple projects simultaneously.

Nice To Haves

Masters Accounting, business or related degree preferred.
Additional certifications such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Internal Auditor (CIA) or Certified Public Accountant (CPA) preferred.
Certified Financial Services Auditor (CFSA) and Certified Risk Professional (CRP) are other certifications that are desirable.

Responsibilities

Partners with all levels of management and line of business to develop creative and innovative business-oriented solutions to improve controls, mitigate risks, and influence positive change.
Collaborates across the three lines of defense regarding business processes, risks, and controls. Identify thematic risk trends across the organization. Continuously monitor for changes in the organizational risk profile and/or operational environment and modify the audit schedule, risk assessment, and audit universe as necessary.
Builds and maintains strong relationships with business partners across the organization to help them align their business strategy with appropriate risk management practices and controls.
Leads the development and implementation of an audit plan and strategy using an appropriate risk-based methodology, including performing and designing assigned audit entity risk assessments to support a forward-looking, strategically aligned audit plan. Additionally, trains the team on the use of audit workpapers.
Determines appropriate audit cycles, necessary resources, and estimated expenses associated with the completion of the forward-looking 12 – 18-month audit plan. Presents sections of Audit Plan to senior leadership and the Board Audit Committee for approval. Monitor advancement of assigned audit engagements, in contrast, to plan and make essential adjustments.
Assess the adequacy of management’s action plans for addressing and correcting audit findings and issues. Monitor through regular follow-up, the progress of management action plans.
Oversee the IA Department technology and IT vendor management activities. Lead with soliciting/analyzing proposals and negotiating third party audit engagements.
Designs process improvements and standardization of audit processes, methodologies, and guidelines. Evaluate current audit approaches and practices and provide thought leadership on industry best practices to drive maturation and evolution of the Audit Department. Work with the audit team to ensure consistency and compliance with both internal and professional standards.
Represents the audit division at quarterly Board Audit Committee meetings. Prepares and presents audit reports/results, audit plan status, and corrective action plan updates to the Audit Committee.
Manages ongoing assessments of the changing risk profile including closely interfacing with management to ensure understanding and controls to ensure it is effective, collaborative, and inclusive.
Conducts financial, operational, and compliance audits, which includes, but is not limited to planning, fieldwork, and report writing phases of the audit. Effectively identify control gaps, analyze underlying root causes, and communicate to management ensuring effective action plans have been identified.
Recruits and develops team members needed to meet department objectives and strategy. Manages, coaches, and mentors audit team members with focus on career development and succession.
Contributes to development of monthly/quarterly Audit Committee package.