The Internal Audit (IA) is the third line of defense. The IA is accountable to the KeyCorp Audit Committee and is responsible for providing an independent and objective perspective on KeyCorp's processes and risks through assessment and testing of the adequacy and effectiveness of Key's risk management policies and practices, while also ensuring adherence to applicable laws and regulations. This is accomplished through completion of an Annual Audit Plan, which includes both risk evaluations and risk reviews (internal audits). The Enterprise Projects (EP) team within IA tracks and evaluates ongoing programs, projects, and initiatives across the bank. The team focuses on initiatives that are complex, strategically significant, internally, and externally visible, and high risk. Day-to-day activities of the EP team include: Project risk monitoring activities, including attendance of project team meetings and review of project status documentation; Evaluations of future-state technology controls introduced by the projects under review; Generation of independent status documentation to report on the health, activities, and risks/issues of each project under review; Escalation of concerns to project leadership and subsequent tracking of remediation efforts; Testing of project lifecycle control adherence; Coordination of cross-functional IA engagement teams. EP's engagements may relate to numerous lines of business, products, processes, and risk categories, so engagement teams are integrated and include IA resources with expertise in all impacted areas. The Senior Auditor will be responsible for assisting with the coordination and completion of the three phases of a risk review: Planning, Fieldwork and Reporting. This will include completion of walkthroughs, interacting with line of business personnel, performing and documenting testing of internal controls, ensuring adherence to required laws and regulations, drafting of findings, reporting deliverables, as well as assisting the review lead in the identification of the risks and controls associated with the various business functions. During the course of a risk review, the Senior Auditor may be asked to serve as a lead on smaller, less complex reviews. The Senior Auditor may also participate in ad-hoc projects, ongoing risk intelligence activities and risk review related training.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
Job Type
Full-time
Career Level
Mid Level