Senior Cyber Security Auditor

Rockland Trust•Rockland, MA

4h•Hybrid

About The Position

Rockland Trust is looking for a talented professional to join our Audit team and be part of a growing bank. Our people are our most valuable asset, and we know that skilled professionals are essential to the company’s continued success. Rockland Trust operates in Massachusetts, Rhode Island, and New Hampshire and has been recognized by The Boston Globe as a Top Place to Work and by Forbes as the #1 bank in Massachusetts on its 2025 World’s Best Banks list. We offer a wide range of banking, investment, and insurance services to businesses and individuals through retail branches, commercial lending offices, investment management offices, and residential lending centers. The Audit department recruits individuals with diverse backgrounds, including internal and external audit experience, information technology, and specialized areas such as compliance and consulting. We are a collaborative team with strong relationships and a commitment to learning and growth. We offer flexible and hybrid work options, ongoing training, and opportunities for professional development. The Audit Specialist will join our team and assist in executing and developing our audit plan.

Requirements

Working knowledge of IT General Controls, infrastructure components (e.g. Network infrastructure, Databases, Servers, Middleware, APIs, etc.), and IT risks.
Knowledge of, or the ability to learn and research, IT regulations relevant to the banking industry.
Time management skills and the ability to multi-task between Dedicated IT Audits, Integrated IT Audits, and Special IT Audit Projects while meeting deadlines.
Extensive experience in providing management with observations and experience to improve business processes, increase operating efficiencies, and reduce operational, technology and financial risks.
Bachelor’s degree in business technology, information systems, computer science, or the equivalent.
Five to Ten years of IT Audit or industry experience.
Holds a Certified Information Systems Auditor (CISA) or Certified Information System Security Professional (CISSP) professional designation.
Strong work ethic and self-motivation to continue professional development.

Nice To Haves

Certified Internal Auditor (CIA) professional is desirable.

Responsibilities

Independently plan, execute, and report on comprehensive audits of IT Governance, Technology Architecture, Information Security, and core IT processes (e.g., Network Management, Data Loss Prevention, IT Asset Management, etc.).
Execute the Audit Plan by understanding organization objectives, structure, policies, processes, internal controls, and external regulations; identifying risk areas; preparing audit scope and objectives; preparing audit programs focused on the underlying infrastructure and resilience streams at the bank.
Support the IT Audit Manager and IT Audit Director in the development, planning, and budgeting of the IT Audit strategy.
Serve as a subject matter expert on one or more key technology area(s) including Network, Databases, Cloud, Application Programming Interface (APIs), Middleware, DevOps and other emerging technologies.
Exhibit a high level of objectivity in performing audits over key business systems, financial reporting systems, automated controls, and infrastructure across the bank.
Function as team leader, in assignments involving multiple members of the IA team, as necessary.
Assist in yearly testing of Sarbanes-Oxley IT key controls or Business Aligned IT Control Testing as required.
Conduct retesting of previously identified audit and regulatory findings to verify that corrective actions have been successfully implemented.
Document and memorialize the results of audits and special projects in quality work papers, memos, and reports. Promote effective communication and information exchange by holding status meetings; highlighting new and unresolved issues; reviewing working papers; preparing clear and concise final audit reports.
Provide professional feedback to senior level management on IT risk, risk monitoring, internal control structure, and operating processes.
Support external auditors by coordinating information requirements and participating in control walkthroughs. Perform data analytics to analyze and summarize key data and trends. Evaluate the banks’ compliance with key privacy practices such as GLBA and Mass Privacy laws. Stay up to date on industry best practices and regulatory changes by participating in educational opportunities (e.g. conferences, higher educational programs, webinars, networking events etc.). Build and maintain relationships with the Audit team and Management.
Assist in the training of audit team members.