Lead IT Auditor

Navy Federal•Pensacola, FL

About The Position

To lead the planning and execution of complex IT, information security, and integrated audits. Act as Auditor-In-Charge on audits, provide guidance and direction to Internal Audit staff, and participate in Internal Audit initiatives. Play a role in promoting partnership, trust, and accountability within our organization and building deeper relationships with our audit stakeholders. This position is eligible for the TalentQuest employee referral program. If an employee referred you for this job, please apply using the system-generated link that was sent to you. Navy Federal Credit Union currently does not provide sponsorship for this role. Applicants must be authorized to work in the United States without the need for current or future sponsorship.

Requirements

Minimum five years of hands-on experience leading technology infrastructure and information security audits
Advanced knowledge of IT control practices and risk-based auditing techniques
Expert knowledge of IT Risk, General Controls, technology infrastructure controls, Information Security Frameworks and best practices
Expert knowledge of technology and financial systems risk assessments, including complex infrastructure environments (e.g., networks, operating systems, cloud platforms, identity and access management, logging and monitoring)
Experience as an Auditor-in-Charge over IT/integrated audits, with demonstrated ability to independently perform end ‑ to ‑ end audit planning, scoping, execution, and reporting with minimal coaching
Significant experience managing multiple priorities independently and operating well in a team environment to achieve goals
Advanced interpersonal and communication skills, including experience working with all levels of staff, management, stakeholders, and vendors
Significant experience in collaborating across organizational boundaries and building partnerships across various functions
Advanced interpersonal and communication skills, including experience working with all levels of staff, management, stakeholders, and vendors
Advanced skill to influence, negotiate and persuade to reach agreeable outcomes and positive results
Advanced skill presenting findings, conclusions, alternatives, and information clearly and concisely
Expert organizational, planning, and time management skills
Advanced word processing and spreadsheet software skills
Expert critical thinking, analytical, and problem-solving skills
Bachelor’s degree or the equivalent combination of experience, education, and training

Nice To Haves

IT Certifications – CompTIA A+, Network+, Security +, CISA, CRISC, CISSP or GIAC Security Essentials (GSEC) Certification
Master’s degree in Computer Science, Information Technology, or related field
Demonstrated ability to design and execute detailed, comprehensive, and risk ‑ based audit testing approaches for complex technology infrastructure and information security audits
Demonstrated ability to coach and mentor junior and senior IT auditors to improve testing effectiveness, testing efficiency, and the thoroughness and quality of audit documentation and workpapers

Responsibilities

Plan, conduct, and lead the most complex and high-risk IT and/or integrated audits in accordance with Navy Federal and industry audit standards
Analyze and assess Navy Federal's technological infrastructure to ensure processes and systems run accurately and efficiently, while remaining secure and meeting compliance regulations
Plan and execute audits of the organization’s IT systems in place to provide for confidentiality, availability and integrity of system and processes
Develop risk-based audit objectives, scopes, and test plans to ensure NFCU's IT systems and infrastructure are compliant with regulation, requirements, policies, and standards
Consistently act as Auditor-In-Charge on IT/integrated audits, including on those of higher risk/complexity, providing guidance, coaching, and direction to Internal Audit staff regarding Navy Federal practices and industry standards
Act as Auditor-in-Charge managing multiple audits at the same time. Coach auditors to apply critical thinking skills by seeking to understand and execute assigned control testing and document results according to professional and internal standards
Lead coordination efforts with points of contact and first/second lines of defense to conduct preliminary research, lead process walkthroughs, document process narratives and workflows, identify key risks and controls, and obtain audit evidence for testing
Identify and pursue opportunities to leverage data analytics and technology to drive deeper risk coverage and insights to business partners
Review and analyze audit evidence and results of testing to determine design and operating effectiveness of controls. Identify, quantify, and communicate issues and provide risk-based recommendations to implement and enhance internal controls to management in a timely manner
Review audit workpapers to confirm that relevant information was obtained, analyzed, and evaluated to support audit observations/issues and conclusions
Work collaboratively with other departments and stakeholders to provide insights and recommendations for improvement. Partner with business areas to ensure adequate remediation plans are developed and implemented
Draft high-quality, well-written, and timely audit reports for senior management, the President/CEO, and the Supervisory Committee
Mentor auditors and/or support staff in the execution of audits by supporting them in the identification of risks and controls, development of audit programs, and resolution of issues
Manage audit timelines to ensure the timely reporting of identified risks and issues; report delays and issues in overall audit to management and lead resolution of audit project issues
Participate in Internal Audit strategic initiatives and act as a champion of change and continuous improvement
Stay abreast of and ensure compliance with applicable federal, state and industry laws, regulations, and guidelines
Actively monitor and stay current with evolving industry trends, technology, and emerging risks that may impact the company
Perform other duties as assigned