Director, IT Audit Program Manager

Fidelity • Westlake, TX

3d

About The Position

Oversees key risks, threats, controls, and other critical technology risk management functions supporting FFIO, while supporting the launch of innovative products and offerings. Provides independent, objective audit and advisory services to help FFIO manage risk, improve customer service, and enhance business performance. Performs complex technology and business-integrated audits, develops risk and control hypotheses, contributes to integrated audit planning, collaborates with application teams, and uses audit automation tools to evaluate business operations and systems.

The role defines and manages program scope, objectives, and deliverables in alignment with organizational goals. It leads technology risk assessments and issue mitigation and tracking, assesses workflows and end-to-end processes for embedded risks and controls, helps the business develop control programs that meet corporate standards, and partners with business and technology leaders to support organizational goals within risk tolerance. The position applies strategic data analytics to identify control deficiencies, drafts audit reports describing issues, business or enterprise implications, and management action plans, and builds strong working relationships with audit teams and clients.

Requirements

• Bachelor’s degree in Computer Science, Engineering, Information Technology, Information Systems, Information Management, Technology Management, or a closely related field (or foreign education equivalent), and six years of experience as a Director, IT Audit Program Manager or in a closely related occupation performing IT audit, information security assessments, and critical technology risk management for financial services applications and IT infrastructure across vendor, on-premises, and cloud environments; alternatively, a qualifying master’s degree and four years of such experience.
• Demonstrated expertise triaging and guiding implementation of controls for existing and emerging technology risks in complex financial management and operations systems, using Power BI, Tableau, and Microsoft Office Suite (PowerPoint, Word, and Copilot) to optimize audit planning, risk prioritization, and technology risk program design, implementation, and management.
• Demonstrated expertise auditing internal controls and examining regulatory, financial, and technology risk using Python scripts and Microsoft Excel functions and Macros across enterprise technology, risk and compliance functions, and finance, human resources, real estate, legal, diversified strategic investments, charitable, and emerging business incubator initiatives.
• Demonstrated expertise performing IT risk analysis and security assessments of corporate-wide IT infrastructure; performing cloud and system development using cybersecurity principles and NIST CSF techniques; and identifying technical control weaknesses, system vulnerabilities, and insecure configurations using AWS, Docker, API, Oracle DB, and Microsoft SQL Server.
• Demonstrated expertise verifying the security and efficiency of Secure Software Development Lifecycle (SSDLC) processes using DevOps and vulnerability scanning platforms, including GitHub, Jenkins, Artifactory, and Qualys; and identifying security gaps in privileged account administration and secrets management using AWS Secrets Manager, Hashicorp, CyberArk, Active Directory, SAML, and oAuth.

Responsibilities

• Define, manage, and implement program scope, objectives, and deliverables aligned with organizational goals.
• Lead technology risk assessments and issue mitigation and tracking.
• Understand workflow technology and end-to-end processes, identifying risks and controls throughout the function.
• Help the business build control programs that mitigate risk and meet corporate standards.
• Partner with business and technology leaders to support business goals within the organization’s risk tolerance.
• Apply strategic data analytics concepts, principles, and techniques to identify control deficiencies efficiently and effectively.
• Draft audit reports that explain identified issues, their business or enterprise implications, and management action plans.
• Build deep working relationships with audit teams and clients.
• Perform complex technology and business-integrated audits; develop risk and control hypotheses; contribute to integrated audit planning; collaborate with application teams; and leverage audit automation tools to evaluate operations and systems.

What This Job Offers

• Job Type: Full-time
• Career Level: Director