IT Audit Officer

Rockland Trust Company•Rockland, MA

14h•Hybrid

About The Position

Rockland Trust is seeking a motivated, detail-oriented IT Audit Officer to join its Internal Audit team. This hybrid position is based in Rockland, Massachusetts, subject to business needs. The role works with Internal Audit leadership and business partners to assess technology risks, evaluate controls, and support execution of the Bank’s IT audit plan. It provides independent assurance over technology-related controls, systems, and processes, and supports risk management, governance, and regulatory compliance initiatives. The IT Audit Officer participates in risk-based and integrated audits across technology and cybersecurity environments. The position evaluates control design and effectiveness, documents and communicates findings, supports remediation validation, and assists with examinations and independent assessments. The successful candidate is expected to maintain professional skepticism and independence, deliver quality work within established timelines, and stay informed about emerging technology risks and regulatory expectations.

Requirements

Bachelor’s degree in Information Systems, Computer Science, Information Technology, Cybersecurity, Accounting, Business, or a related field.
3–5 years of experience in IT Audit, Information Security, Technology Risk Management, Internal Audit, External Audit, or a related field.
Certified Information Systems Auditor (CISA) certification.
Strong understanding of IT General Controls (ITGCs), cybersecurity concepts, technology infrastructure, cloud environments, and application controls.
Experience participating in audits or assessments of technology processes and controls.
Strong analytical, problem-solving, organizational, and communication skills.
Ability to manage multiple assignments and priorities while meeting deadlines.
Ability to communicate audit observations and recommendations effectively to stakeholders.

Nice To Haves

Experience within a financial institution, regulated industry, or public accounting environment.
Familiarity with cybersecurity frameworks such as NIST, CIS, or FFIEC guidance.
Experience auditing cloud platforms such as Microsoft Azure or AWS.
Exposure to information security, technology risk management, or compliance-related activities.
Experience leveraging data analytics or audit automation tools.
Professional certifications such as CISSP, CIA, CISM, or CRISC.

Responsibilities

Participate in and execute risk-based audits covering IT governance, cybersecurity, information security, technology operations, cloud computing, infrastructure, data management, and digital banking.
Support integrated audit engagements by executing General IT Controls (GITC) testing.
Assist in planning, performing, and documenting audit engagements in accordance with Internal Audit standards and regulatory expectations.
Evaluate the design and effectiveness of technology controls supporting business processes, applications, and infrastructure.
Identify control weaknesses, emerging risks, and process improvement opportunities.
Assess compliance with regulatory requirements and industry frameworks, including FFIEC guidance, GLBA, NIST, and applicable privacy regulations.
Participate in audits of technology projects, third-party service providers, and cloud service environments.
Perform IT General Controls (ITGC) testing and support SOX-related audit activities as needed.
Use data analytics and audit tools to identify trends, anomalies, and potential control gaps.
Prepare audit documentation, reports, and presentations for management review.
Validate management action plans and remediation efforts related to audit findings.
Support internal and external examinations, regulatory reviews, and independent assessments.
Build and maintain working relationships with technology, risk, cybersecurity, compliance, and business partners.
Stay informed about emerging technology, cybersecurity risks, and evolving regulatory expectations.
Deliver high-quality work within established timelines while maintaining professional skepticism and independence.