Director, IT Audit

Wings Credit Union•Colorado Springs, CO

4d•$150,000 - $175,100

About The Position

The Director of IT Audit plays a critical leadership role in shaping the future of technology risk assurance, insight regarding technology risks, and Internal Audit at Wings Credit Union. Reporting to the VP of Internal Audit, this leader is responsible for developing and executing the IT audit strategy while providing independent assurance, advisory services, and risk insights across the organization's technology, cybersecurity, data, and digital environments. As a key member of the Internal Audit leadership team, the Director of IT Audit partners closely with executive leadership, technology leaders, risk partners, regulators, and the Audit Committee to evaluate and strengthen governance, risk management, and control practices. This leader is responsible for building and leading a high-performing IT Audit function, developing talent, enhancing audit methodologies, and providing assurance over the organization’s readiness for an evolving technology and risk landscape. This role offers the opportunity to influence enterprise technology risk oversight, build and scale a modern IT audit function, develop future audit leaders, and help shape the future of Internal Audit within a growing and increasingly complex organization.

Requirements

Bachelor's Degree in Information Technology Operations, IT Security, Business Administration with a focus on Information Systems, or similar field of study required
10+ years' of progressive experience in internal audit, external audit, risk management, regulatory supervision, operational and informational required
3+ years' supervisory experience. required
Mastered ability to lead a risk-based assurance strategy, develop a forward-looking audit pipeline, prioritize work across evolving risks, and influence enterprise-minded decisions that strengthen business outcomes and resiliency.
Deep understanding of operational and technical information systems concepts and controls including network infrastructure, computer operating systems, database management systems, SDLC, change management, IT governance and complex computer applications.
Demonstrated executive communication, storytelling, stakeholder partnership, and influencing skills, including the ability to communicate complex risk and control topics clearly and actionably.
Experience working with a variety of technology platforms and must be familiar with performing network, hosted site/SaaS, database, cyber security operations, project management, and information system general controls audits.
Strong understanding of technology processes (e.g., Change management, security, technology operations, and application controls).
Strong professional judgment, critical thinking, professional skepticism, curiosity, courage, and ability to make sound decisions in ambiguity while preserving independence, objectivity, and quality.
Strong understanding of financial institutions and applicable regulatory oversight.
Aptitude for detail / analytical work.
Proven ability to hold confidential information in strict confidence.
Proven aptitude for leadership, mentoring staff, and initiative.
Demonstrated ability to lead, coach, and develop team members through ambiguity and change while fostering belonging, inclusive and caring leadership, accountability, and future-ready skills, behaviors, and mindsets.
CertInfo Sys Auditor One or more IT certifications (CISA, CISSP, CISM, etc.) required
Related nationally accredited Auditor designation approved by upper management. required

Nice To Haves

10+ years' IT Auditor related experience acquired in a bank, credit union, or other financial services focused entity. preferred
Cybersecurity Audit Certification preferred
Certified in Risk and Information Systems Control (CRISC) preferred
Experience in managing vendor relationships for outsourced audit services.

Responsibilities

Develop and maintain the IT audit universe, risk assessment methodology, and audit strategy to ensure appropriate coverage of technology, cybersecurity, data, operational resilience, and emerging risks.
Lead the development of risk-based audit, advisory, and continuous monitoring plans that align with organizational objectives, regulatory expectations, and evolving risk landscapes.
Evaluate emerging technology, cybersecurity, digital transformation, artificial intelligence, and operational risks to ensure audit coverage remains relevant and forward-looking.
Lead the integration of artificial intelligence, emerging technologies, digital transformation, and operational considerations into audit planning, risk assessments, and assurance strategies.
Establish both short- and long-term audit priorities, resource plans, and capability strategies that support the continued growth of the organization.
Ensure audit approaches remain appropriately aligned to the organization's risk profile, strategic priorities, and technology environment.
Provide leadership and oversight of the IT Audit portfolio, ensuring engagements are completed efficiently, effectively, and in accordance with Internal Audit methodology and professional standards.
Approve audit scopes, objectives, and resource allocations while serving as an escalation point for complex issues, barriers, and emerging risks.
Monitor audit execution, resource utilization, project milestones, quality standards, and audit plan delivery while proactively identifying and addressing risks to successful delivery.
Ensure high standards of audit quality, consistency, documentation, reporting, and stakeholder engagement across all audit activities.
Drive continuous improvement efforts that enhance audit effectiveness, efficiency, and overall value delivered to the organization.
Build, lead, coach, and develop a high-performing IT Audit team capable of supporting current and future organizational needs.
Foster a culture of accountability, collaboration, innovation, continuous learning, and professional growth.
Develop leadership capabilities across the team through coaching, mentoring, succession planning, and meaningful development opportunities.
Assess future talent and capability needs while helping build a scalable audit function designed to support organizational growth.
Champion employee engagement initiatives that strengthen retention, team effectiveness, and performance.
Serve as a trusted advisor to executive leadership by providing meaningful insights into technology, cybersecurity, governance, and operational risks.
Translate complex audit results, risk trends, and control observations into practical recommendations that support informed decision-making and business performance.
Build strong relationships across technology, risk, compliance, and business functions while maintaining audit independence and objectivity.
Engage effectively with regulators, external auditors, and governance committees while representing the Internal Audit function with professionalism and credibility.
Partner with leaders across all lines of defense to support effective risk management and continuous improvement efforts.
Lead the evolution of audit processes, methodologies, tools, and reporting practices to improve coverage, efficiency, and insight generation.
Lead the development and maturation of Internal Audit's artificial intelligence capabilities, including governance frameworks, audit methodology enhancements, documentation standards, risk assessment integration, assurance strategies, and AI-enabled auditing practices.
Promote the use of data analytics, automation, artificial intelligence, and technology-enabled auditing techniques across the audit lifecycle.
Identify opportunities to modernize the Internal Audit function and implement leading practices that support future-state audit capabilities.
Stay informed on industry developments, regulatory expectations, emerging technologies, and evolving audit practices to ensure continued relevance and effectiveness.
Remain knowledgeable of and adhere to Wings policies, procedures, and regulations related to the Bank Secrecy Act.