IT Auditor Senior

City National Bank of Florida•Coral Gables, FL

19d

About The Position

The Senior IT Auditor independently performs IT internal audits and collaborates on co-sourced and outsourced IT audit engagements. The role communicates directly with management during audits and analyzes process flows through observation, interviews, and review of documented processes. The Senior IT Auditor identifies audit tests and recommends automation to support auditees and improve processes. The position leads IT audit work in accordance with the Audit Committee-approved plan, including planning, risk assessment, fieldwork, internal-control evaluation, and preparation of working papers. It discusses findings and recommendations with bank management, prepares corrective action plans for Audit Manager review, and participates in drafting reports for senior management. The role also advances the Internal Audit department’s data-analysis capabilities, partners with audit teams on analytics, researches relevant techniques and tools, supports special investigations involving significant losses or employee defalcation, and provides audit managers with project analysis, status, advice, and regular metrics.

Requirements

5–7 years of experience in IT auditing, internal auditing, external auditing of financial institutions, or regulatory examination.
Thorough knowledge of banking practices, principles, and the interrelationships of banking functions.
Strong IT foundation, including infrastructure and cybersecurity risk, and ability to identify risks and controls in IT areas such as security, operations, and change management.
Understanding of Active Directory, Windows OS, Oracle, and SQL databases.
Understanding of network infrastructure devices and capabilities, including routers, firewalls, intrusion detection/prevention systems, and wireless technology.
Comprehension of IT general controls, application controls, and business process reviews.
Skills in fact-finding, analysis, problem-solving, and decision-making.
Detail-oriented, with excellent project management, organization, and planning skills.
Expert PC skills, including Excel, Word, PowerPoint, Adobe, and Outlook.
Bachelor’s degree in Computer Science, Information Systems, Information Technology, or a related field, or an equivalent combination of education and relevant professional experience.

Nice To Haves

Experience with core banking platforms is highly preferred.
Experience with COBIT and COSO, and exposure to NIST SP 800-53, are a plus.
ACL, Tableau, or SQL experience is preferred.
CISA, CIA, CISSP, or another relevant audit certification or designation is a plus.

Responsibilities

Lead and manage all phases of Information Technology audits under the Audit Committee-approved audit plan, including planning, risk assessment, fieldwork, internal-control evaluation, and working-paper preparation.
Identify and discuss audit findings and recommendations with appropriate bank management.
Prepare Corrective Action Plans during fieldwork for Audit Manager review and issuance.
Participate in drafting audit reports to senior management and reporting corrective action plans resulting from audit work.
Help advance the Internal Audit department’s data-analysis capabilities.
Identify opportunities to partner with audit teams and use analytics to improve risk assessment, audit coverage and execution, and issue identification.
Research analytics techniques, tools, and areas of interest, and share information with audit teams for audit planning and execution.
Participate in special investigations following significant losses or employee defalcation, assembling data for regulatory agencies, attorneys, and bonding agencies.
Provide audit managers with analysis, interpretation, project status, and advice.
Provide regular, meaningful metrics to the Audit Manager.
Analyze process flows through observation, interviews, or review of documented processes; identify audit tests and recommend automation to assist auditees and enhance processes.
Communicate directly with management during IT audits.