Information Technology Auditor - Data Analytics

OnPoint Credit Union•Portland, OR

About The Position

OnPoint Community Credit Union’s IT Auditor – Data Analytics will assess the design and effectiveness of information technology controls across the credit union’s systems, infrastructure, and applications, while helping expand Internal Audit’s data analytics program. The role requires knowledge of IT governance, cybersecurity, and financial-institution regulatory compliance, along with the technical ability to access, organize, and analyze data for audit engagements. The position performs IT audits throughout the audit lifecycle, assesses technology risks, tests controls, and recommends improvements to operational resilience and regulatory compliance. It also uses Databricks and other approved tools to obtain, prepare, validate, and provide data for audit use, and develops and advises on analytics procedures supporting both IT and operational audits.

Requirements

Bachelor’s degree in information systems, computer science, data analytics, accounting, or a related field, or equivalent experience in lieu of a degree; relevant work experience may substitute for the degree requirement.
At least 3 years of experience in IT auditing, data analytics, or a related technology, data, or risk role.
Intermediate SQL skills for data extraction, transformation, and validation.
Knowledge of IT audit principles, risk assessment practices, control design, and operating-effectiveness testing.
Knowledge of IT governance, cybersecurity, data governance, and applicable financial-industry requirements and frameworks, including GLBA, NCUA requirements, FFIEC guidance, PCI DSS, NIST CSF, and COBIT or ITIL.
Understanding of data sourcing, transformation, validation, documentation, access controls, and responsible use of AI-enabled analytics in an audit environment.
Strong analytical and problem-solving skills, including the ability to evaluate complex data, identify risks and control gaps, and develop supportable conclusions.
Strong written and verbal communication skills, including audit documentation, report writing, and translating technical findings for non-technical audiences.
Sound judgment and attention to accuracy, confidentiality, data governance, and audit evidence standards.
Collaboration, initiative, adaptability, and organization in building sustainable analytics practices and managing concurrent priorities and deadlines.

Nice To Haves

Certified Information Systems Auditor (CISA), Certified Internal Auditor (CIA), Certified in Risk and Information Systems Control (CRISC), or similar certification.
Experience with Databricks, Python, Power BI, or similar analytics tools.

Responsibilities

Plan and execute risk-based audits, in accordance with the Global Internal Audit Standards, covering systems, infrastructure, networks, databases, applications, cybersecurity practices, data governance, and technology-related processes.
Identify and assess technology risks and evaluate the design and operating effectiveness of related controls against applicable laws, regulations, supervisory guidance, industry standards, internal policies, and control frameworks.
Prepare clear, supportable audit documentation and reports; communicate risks, observations, conclusions, and recommendations to management and other stakeholders; and support regulatory or supervisory requests as directed by audit leadership.
Monitor management action plans and perform validation testing to determine whether corrective actions have been implemented and address identified risks.
Use Databricks and other approved tools to access, extract, prepare, validate, and securely provide data for IT and operational audit engagements, documenting data sources, selection criteria, transformations, reconciliations, and known limitations.
Consult with auditors on how available data may address audit objectives, including potential analytical procedures, testing techniques, data limitations, and interpretation considerations.
Assist the IT Audit Manager in developing and maintaining Internal Audit’s data analytics capabilities, including procedures, documentation standards, reusable guidance, training, and appropriate use of emerging analytics and automation tools.
Participate in applicable data governance and knowledge-sharing activities, communicate relevant standards and developments to the audit team, and coordinate Internal Audit’s data and access needs.
Perform other projects, duties, and responsibilities as assigned.