Sr. IT Audit Manager

Varo Bank•,

About The Position

Varo is building a world-class Internal Audit Function and is recognized for our customer and business focus, objectivity, and value-add. As Varo is the first consumer fintech to get a national bank charter in the United States, we are seeking skilled and highly motivated professionals who want to be part of a new audit function for a technology and data-driven business model in a regulated financial services sector. As IT Senior Audit Manager is a key role at an all-digital bank with a modern tech stack and shared infrastructure. This role will partner across the business to bring subject matter expertise, business acumen, and insights to the assessment of these areas. We’re looking for an audit leader who is curious, a builder, and can collaborate effectively.

Requirements

Minimum 7-10 years of relevant experience in IT audit or technology risk management, including at least 3 years of experience managing people or leading complex audit projects
Comfortable navigating cloud environments (AWS preferred), understanding automated deployment pipelines (CI/CD), and analyzing data structures
Command of regulatory guidance for technology, cybersecurity, and information security within the financial services sector
Influencer of outcomes and pragmatic tackler of new things
Effective communicator who can adjust to the audience

Nice To Haves

Professional designations such as CISA, CISSP, CPA, or cloud certifications (AWS Certified Cloud Practitioner/Security) are highly desired, but your practical ability to execute matters most

Responsibilities

Direct all aspects of technology audit coverage at Varo and related practices
Personally plan, lead, and execute complex audits on cutting-edge infrastructure, CI/CD pipelines, containerized environments, and data architectures
Provide credible challenge and professional skepticism to assess potential gaps or weaknesses in the internal control infrastructure to ensure risks that pose the most risk to Varo are identified timely and addressed
Establish and maintain effective business relationships
Employ data-driven approaches, utilizing SQL or data analytics to look at entire populations and automate control testing
Assess information technology general controls (ITGC) supporting financial reporting and liaise with external auditors on ITGC
Translate technical risks into clear business impacts for executive management, internal partners, and at times to the Board