IT Auditor II (Advisory and Technology Implementation)

Navy Federal•Pensacola, FL

4d•Onsite

About The Position

Navy Federal's Internal Audit team is undergoing a significant transformation to become a top-tier Audit function. The vision is to be a trusted advisor to the business by consistently delivering high-quality, risk-focused audit and advisory work. This involves implementing efficient processes, maximizing technology utilization, integrating data analytics, and investing in employee development. The IT Auditor II will contribute to the execution of complex IT, information security, pre-implementation, and integrated engagements within Navy Federal. This role involves identifying and testing key risks and controls in the business and participating in Internal Audit initiatives, fostering partnership, trust, and accountability, and building stronger relationships with audit stakeholders.

Requirements

Minimum one year of experience in IT audit.
Working knowledge of IT control concepts and practices and risk-based auditing techniques.
Working knowledge of one or more functions: IT Risk, General Controls, Information Security Frameworks and best practices.
Effective skill in managing multiple priorities independently and operate well in a team environment to achieve goals.
Effective interpersonal and communication skills.
Effective organizational, planning and time management skills.
Effective word processing and spreadsheet software skills.
Effective critical thinking, analytical, and problem-solving skills.
Bachelor’s degree or the equivalent combination of experience, education, and training.

Nice To Haves

Exposure to pre-implementation reviews, advisory engagements, or technology implementation projects.
One to three years of experience in internal audit, IT audit, or a technology/risk-related field.
Experience with credit union financials and/or regulations.
Working Knowledge of NFCU products, services, programs, policies, and procedures.
IT Certifications – CompTIA A+, Network+, Security +, CISA, CRISC, CISSP, GIAC Security Essentials (GSEC), or CIA Certification.
Master’s degree in Computer Science, Information Technology, or related field.

Responsibilities

Perform pre-implementation reviews of new and changing technology to evaluate whether risks are identified and controls are appropriately designed before go-live.
Contribute toward the execution of other advisory and occasional IT audit engagements in accordance with Navy Federal and industry audit standards.
Assist the Auditor-In-Charge in identifying and assessing technology risks to develop and execute a risk-based audit or advisory work program.
Coordinate with points of contact and first/second lines of defense to conduct preliminary research, participate in and occasionally lead process walkthroughs, document process narratives and workflows, identify key risks and controls, and obtain evidence for testing.
Brainstorm ideas for leveraging data analytics and technology to drive deeper risk coverage and insights to business partners.
Perform IT testing, including IT controls, across multiple engagements concurrently.
Apply critical thinking skills by seeking to understand and execute assigned testing and document results according to professional and internal standards.
As part of pre-implementation and advisory engagements, independently review and analyze evidence, requirements, and test results to assess design adequacy, control readiness, and whether the solution meets its intended objectives before go-live.
Evaluate requirements traceability, system integration and data migration testing, and go-live readiness in partnership with project teams.
Identify and summarize potential issues and discuss with the Auditor-In-Charge in a timely manner.
Prepare workpapers to document relevant information obtained, analyzed, and evaluated that support audit observations/issues and conclusions.
Self-manage workload/timelines and report delays and issues to audit management.
Participate in Internal Audit strategic initiatives and act as a champion of change and continuous improvement.
Stay abreast of and ensure compliance with applicable federal, state and industry laws, regulations, and guidelines.
Actively monitor and stay current with evolving industry trends, technology, and emerging risks that may impact the company.
Perform other duties as assigned.