IT Audit Officer

Rockland Trust•Rockland, MA

22h•$80,000 - $120,000•Hybrid

About The Position

Rockland Trust is seeking a motivated, detail-oriented IT Audit Officer to join its Internal Audit team. This hybrid position is based in Rockland, Massachusetts, subject to business needs. The role works across technology and cybersecurity environments to help strengthen the Bank’s risk management, governance, and control framework. Working with Internal Audit leadership and business partners, the IT Audit Officer assesses technology risks, evaluates controls, and supports execution of the Bank’s IT audit plan. The position provides independent assurance over technology-related controls and key systems and processes, and supports regulatory compliance initiatives.

Requirements

Bachelor’s degree in Information Systems, Computer Science, Information Technology, Cybersecurity, Accounting, Business, or a related field.
3–5 years of experience in IT Audit, Information Security, Technology Risk Management, Internal Audit, External Audit, or a related field.
Certified Information Systems Auditor (CISA) certification.
Strong understanding of IT General Controls (ITGCs), cybersecurity concepts, technology infrastructure, cloud environments, and application controls.
Experience participating in audits or assessments of technology processes and controls.
Strong analytical, problem-solving, organizational, and communication skills.
Ability to manage multiple assignments and priorities while meeting deadlines.
Ability to effectively communicate audit observations and recommendations to stakeholders.

Nice To Haves

Experience within a financial institution, regulated industry, or public accounting environment.
Familiarity with cybersecurity frameworks such as NIST, CIS, or FFIEC guidance.
Experience auditing cloud platforms such as Microsoft Azure or AWS.
Exposure to information security, technology risk management, or compliance-related activities.
Experience leveraging data analytics or audit automation tools.
Professional certifications such as CISSP, CIA, CISM, or CRISC.

Responsibilities

Participate in and execute risk-based audits covering IT governance, cybersecurity, information security, technology operations, cloud computing, infrastructure, data management, and digital banking.
Support integrated audit engagements by executing General IT Controls (GITC) testing.
Assist in planning, performing, and documenting audit engagements in accordance with Internal Audit standards and regulatory expectations.
Evaluate the design and effectiveness of technology controls supporting business processes, applications, and infrastructure.
Identify control weaknesses, emerging risks, and opportunities for process improvement.
Assess compliance with regulatory requirements and industry frameworks, including FFIEC guidance, GLBA, NIST, and applicable privacy regulations.
Participate in audits of technology projects, third-party service providers, and cloud service environments.
Perform IT General Controls (ITGC) testing and support SOX-related audit activities as needed.
Use data analytics and audit tools to identify trends, anomalies, and potential control gaps.
Prepare clear and concise audit documentation, reports, and presentations for management review.
Validate management action plans and remediation efforts related to audit findings.
Support internal and external examinations, regulatory reviews, and independent assessments.
Build and maintain effective working relationships with technology, risk, cybersecurity, compliance, and business partners across the organization.
Stay informed about emerging technology, cybersecurity risks, and evolving regulatory expectations.
Deliver high-quality work within established timelines while maintaining professional skepticism and independence.