Lead Internal Auditor

Southland Credit Union•Rossmoor, CA

2d•$79,000 - $99,000

About The Position

Southland Credit Union is seeking a Lead Internal Auditor to help oversee its Internal Audit Program and independently evaluate the effectiveness of internal controls. Reporting to the VP of Enterprise Risk Management, the role owns key audit activities and serves as the primary liaison to co-sourced audit partners. The auditor works across departments and with leadership to provide objective, risk-focused insight and ensure identified risks and control deficiencies receive appropriate attention and resolution. The role helps develop and maintain the risk-based audit universe and annual audit plan, participates in enterprise risk assessments, evaluates emerging risks, and maintains audit workpapers and program documentation in accordance with professional standards. It plans and performs operational, financial, and compliance audits from fieldwork through final reporting, including testing, analysis, interviews, and evaluation of compliance with policies, procedures, laws, and regulations. The Lead Internal Auditor identifies control deficiencies, root causes, and emerging risks, and prepares clear reports with practical recommendations. The role coordinates with Information Security and specialized audit professionals when needed, and manages co-sourced engagements by coordinating scope, objectives, progress, and deliverables. It also maintains issue tracking, monitors corrective action plans, validates remediation, escalates overdue or significant findings, and supports regulatory examination readiness. The position prepares and presents periodic reporting to management, the Supervisory Committee, and the Enterprise Risk Management Committee on audit findings, remediation progress, emerging risks, and significant control issues. It provides advisory support on internal controls, risk management, and compliance while preserving the independence and objectivity of Internal Audit.

Requirements

At least five years of experience in internal audit, external audit, risk management, compliance, regulatory oversight, or related financial services functions.
Experience conducting operational, financial, compliance, and risk-based audits.
Experience evaluating internal controls and risk management frameworks.
Experience managing audit findings, remediation tracking, and validation activities.
Experience coordinating with external auditors, consultants, or co-sourced audit providers.
Bachelor’s degree in Accounting, Finance, Business Administration, Risk Management, Information Systems, or a related field.
Strong understanding of internal auditing standards, risk management principles, governance frameworks, internal controls, and regulatory requirements applicable to financial institutions.
Understanding of risk-based audit planning, audit execution, issue management, remediation validation, and regulatory examination processes.
Ability to independently plan, execute, and manage multiple audit engagements while balancing competing priorities.
Strong analytical, investigative, problem-solving, and critical-thinking skills, including identifying root causes and trends and developing practical recommendations.
Ability to interpret applicable laws, regulations, policies, and guidance and understand their effects on the organization's risk and control environment.
Clear communication skills, including writing reports, giving presentations, and communicating with stakeholders at all levels.
Ability to build effective relationships while maintaining independence, objectivity, and professional skepticism.
Sound professional judgment and discretion when handling sensitive and confidential information.
Comfort using Microsoft Office applications, particularly Excel and Word.
Ability to stay current on regulatory changes, auditing standards, and industry best practices.

Nice To Haves

Experience within a credit union, banking, or other regulated financial institution.
Exposure to regulatory examination processes.
Certified Internal Auditor (CIA), Certified Public Accountant (CPA), or Certified Information Systems Auditor (CISA) certification.
Experience with audit management, issue tracking, governance, risk, and compliance (GRC), or data analytics tools.

Responsibilities

Develop and maintain the risk-based audit universe and annual audit plan, considering organizational objectives, regulatory expectations, prior audit results, and business changes.
Participate in enterprise risk assessments, evaluate emerging risks, and recommend adjustments to audit coverage.
Maintain audit workpapers and program documentation in accordance with professional standards.
Plan and perform operational, financial, and compliance audits from initial fieldwork through final reporting.
Conduct testing, analyze information, interview associates, and evaluate compliance with policies, procedures, laws, and regulations.
Identify control deficiencies, root causes, emerging risks, and opportunities to strengthen processes.
Prepare clear, well-supported reports communicating risks, observations, and practical recommendations.
Coordinate with Information Security and specialized audit professionals on engagements involving information technology, cybersecurity, or other specialized areas.
Serve as the primary liaison to co-sourced audit partners; establish engagement expectations, coordinate scopes and objectives, monitor progress, and review deliverables.
Coordinate communication and accountability among consultants, management, and governance committees.
Maintain the audit issue tracking program, monitor corrective action plans, and perform remediation validation testing.
Escalate overdue, recurring, or significant findings through appropriate management and governance channels.
Support regulatory examination readiness by coordinating audit-related information requests, monitoring examination findings, and independently reporting on corrective action progress within Internal Audit’s scope.
Prepare and present periodic reporting to management, the Supervisory Committee, and the Enterprise Risk Management Committee.
Provide advisory support on internal controls, risk management, and compliance while maintaining Internal Audit independence.