IT Auditor Senior

City National Bank of Florida•Coral Gables, FL

About The Position

The Senior IT Auditor independently performs IT internal audits and collaborates on co-sourced and outsourced IT audit engagements. The role communicates directly with management during audits and analyzes process flows through observation, interviews, and review of documented processes. The Senior IT Auditor identifies audit tests and recommends automation to assist auditees and improve processes. The role leads all phases of Information Technology audits under the Audit Committee-approved audit plan, including planning, risk assessment, fieldwork, internal control evaluation, and preparation of working papers. It discusses findings and recommendations with bank management, prepares corrective action plans for Audit Manager review and issuance, participates in drafting audit reports to senior management, and reports corrective action plans resulting from audit work. The Senior IT Auditor also advances data analysis capabilities within Internal Audit by identifying opportunities to apply analytics to risk assessment, audit coverage, execution, and issue identification. The position researches relevant analytics techniques and tools, supports special investigations involving significant losses or employee defalcation, and provides analysis, interpretation, project status, advice, and meaningful metrics to audit managers.

Requirements

5–7 years of experience in IT auditing, internal auditing, external auditing of financial institutions, or regulatory examination.
Thorough knowledge of banking practices, principles, and interrelationships of banking functions.
Strong information technology foundation, including infrastructure and cybersecurity risk, and ability to identify risks and controls across IT areas such as security, operations, and change management.
Understanding and knowledge of Active Directory, Windows OS, Oracle, and SQL databases.
Understanding of network infrastructure devices and capabilities, including routers, firewalls, intrusion detection/prevention systems, and wireless technology.
Comprehension of IT general controls, application controls, and business process reviews.
Skills in fact-finding, analysis, problem-solving, and decision-making.
Detail-oriented, with excellent project management, organization, and planning skills.
Expert PC skills, including Excel, Word, PowerPoint, Adobe, and Outlook.
Bachelor’s degree in Computer Science, Information Systems, Information Technology, or a related field; an equivalent combination of education and relevant professional experience may be considered instead.

Nice To Haves

Experience with core banking platforms.
Experience with COBIT and COSO, and exposure to NIST SP 800-53.
ACL, Tableau, or SQL experience.
CISA, CIA, CISSP, or another relevant audit certification or designation.

Responsibilities

Lead and manage all phases of Information Technology audits in accordance with the Audit Committee-approved audit plan, including planning, risk assessment, fieldwork, internal control evaluation, and working-paper preparation.
Identify and discuss audit findings and recommendations with appropriate bank management.
Prepare corrective action plans during audit fieldwork for review and issuance by the Audit Manager.
Participate in drafting audit reports to senior management and report corrective action plans resulting from audit work.
Advance the Internal Audit department’s data analysis capabilities by identifying opportunities to use analytics to improve risk assessment, audit coverage, execution, and issue identification.
Research analytics techniques, tools, and areas of interest and share information with audit teams for audit planning and execution.
Participate in special investigations involving significant losses or employee defalcation, assembling data for regulatory agencies, attorneys, and bonding agencies.
Provide analysis, interpretation, project status, and advice to audit managers.
Provide regular updates to the Audit Manager using meaningful metrics.
Analyze process flows through observation, interviews, or review of documented processes; identify audit tests and recommend automation to assist auditees and enhance processes.
Perform independent IT internal audits and collaborate on co-sourced and outsourced IT audit engagements.
Communicate directly with management during IT audits.