Senior Associate, Internal Audit Information Technology & Security

OCC • Chicago, IL

22h • $83,300 - $135,100 • Hybrid

About The Position

This role supports independent assessments of OCC's Information Technology and Security environment, risk management, and other objectives as needed. It determines the sufficiency of management's controls and activities for managing regulatory, operational, and strategic risks and presents recommendations for improvement to the engagement team.

The role supports delivery of assigned audits in the annual audit plan, helps ensure a professional auditee experience, and owns audit quality, result accuracy, and timely delivery. It identifies organizational risks, evaluates exceptions and inefficient practices to determine root causes, and recommends achievable solutions. It also leads audits related to organizational changes, including business requirements, technology implementations, change management, security, and alignment of initiatives with business objectives.

The position maintains and applies knowledge of policies, procedures, standards, and supporting technologies; uses professional principles and standards to test and evaluate risk management processes and controls; and stays current on financial services best practices and emerging risks. It supports effective relationships with business groups and leadership and partners with management. The position has no supervisory responsibilities.

Requirements

• Communicate clearly and effectively, orally and in writing, including in potentially sensitive situations and discussions.
• Demonstrate strong problem-solving and analytical capabilities.
• Gather, analyze, and evaluate facts and prepare and present concise oral and written reports.
• Work independently or as part of a team and prioritize multiple audit assignments to complete them on time.
• Bachelor’s degree or equivalent in Information Technology, Computer Science, Computer Engineering, Accounting, Finance, Business Administration, or a related field.
• At least 2 years of audit-related experience conducting risk-based Information Technology and Security audits and projects, cybersecurity reviews, and internal audits.
• Microsoft Office applications.

Nice To Haves

• Experience working in a complex, fast-paced environment.
• Consulting and/or accounting firm experience.
• Experience in the financial services or securities industry and working with regulations such as Regulation Systems Compliance and Integrity (Reg SCI).
• Experience using principles, practices, and techniques for conducting audits under the International Standards for the Professional Practice of Internal Auditing published by the IIA.
• Familiarity with security tools such as CyberArk, Splunk, and SailPoint.
• Familiarity with change management tools such as ServiceNow, Jira, Confluence, and GitHub.
• Familiarity with databases such as Oracle, DB2, and SQL.
• Familiarity with cloud-based solutions such as AWS and Workday.
• Proficiency using Archer or other audit or Governance Risk and Compliance software.
• CISA, CISSP, CRMA, CIA, CPA, or equivalent certification.

Responsibilities

• Support delivery of assigned audits within the annual audit plan.
• Support a professional experience for auditees.
• Own audit quality, accuracy of results, and timely delivery.
• Proactively identify regulatory, operational, and strategic risks and raise them with the engagement team.
• Evaluate exceptions and inefficient practices to identify root causes and recommend achievable solutions.
• Lead audits related to organizational changes, including business requirements definitions, technology implementations, change management, security, and alignment of change initiatives with business objectives.
• Maintain understanding of policies, procedures, standards, and supporting technologies, and educate staff to identify risks and mitigation alternatives.
• Apply professional principles and standards, including AICPA, IIA IPPF, COBIT, and NIST CSF, to evaluate risk management processes and controls.
• Stay current on financial services industry best practices and emerging risks and recommend improvements.
• Support effective relationships with business groups and leadership and partner with management.

Benefits

• Hybrid work environment with up to 2 days per week of remote work.
• Tuition reimbursement.
• Student loan repayment assistance.
• Technology stipend for using a device of the employee's choice to connect to the network while working remotely.
• Generous paid time off and parental leave.
• 401(k) employer match.
• Medical, dental, and vision benefits.
• Potential eligibility for an annual discretionary bonus; awards are not guaranteed.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level