Senior IT Audit Specialist

Rockland Trust Company•Rockland, MA

17h

About The Position

Rockland Trust is seeking an experienced and highly motivated Senior IT Audit Specialist to join our growing Internal Audit team. This role offers the opportunity to work across a broad range of technology and cybersecurity environments while helping strengthen the Bank's risk management, governance, and control framework. The ideal candidate will bring deep IT audit expertise, strong analytical skills, and a passion for identifying opportunities to enhance controls, manage risk, and support the Bank's strategic objectives. As a trusted advisor, this individual will partner with management and business leaders to assess risks across technology infrastructure, information security, applications, and emerging technology initiatives. This position plays a key role in executing the annual IT audit plan, evaluating technology-related controls, supporting regulatory compliance initiatives, and providing independent assurance over critical systems and processes. The Senior IT Audit Specialist will also contribute to the evolution of the Bank's IT audit strategy while serving as a subject matter expert in key technology domains.

Requirements

Bachelor's degree in Information Systems, Computer Science, Information Technology, Cybersecurity, Business Technology, Accounting, or related discipline.
Minimum 7+ years of experience in IT Audit, Information Security, Technology Risk Management, Internal Audit, External Audit, or a related field.
Strong understanding of IT General Controls (ITGCs), cybersecurity frameworks, technology infrastructure, cloud environments, and application controls.
Experience auditing complex technology environments within regulated industries, preferably banking or financial services.
Demonstrated ability to independently manage multiple audit engagements and competing priorities.
Exceptional communication, analytical, problem-solving, and stakeholder management skills.
Proven ability to provide practical, risk-based recommendations that strengthen controls while supporting business objectives.
Professional certification: Certified Information Systems Auditor (CISA), or Certified Information Systems Security Professional (CISSP)

Nice To Haves

Certified Internal Auditor (CIA)
Certified Information Security Manager (CISM)
Certified in Risk and Information Systems Control (CRISC)
Advanced in AI Audit (AAIA)
Experience within a financial institution, regulatory environment, or Big Four accounting firm.
Experience auditing cloud platforms (Azure, AWS, Google Cloud), cybersecurity programs, digital banking systems, and third-party service providers.
Working knowledge of AI Governance, AI Risk Management, and emerging technology auditing practices.
Experience leveraging data analytics and audit automation tools.

Responsibilities

Lead and execute risk-based audits covering IT Governance, Cybersecurity, Information Security, Technology Operations, Cloud Computing, Infrastructure, Data Management, Digital Banking, and Emerging Technologies.
Partner with business audit leads to execute General IT Controls (GITC) testing as part of integrated audit engagements.
Independently plan, scope, perform, and deliver audit engagements in accordance with Internal Audit standards and regulatory expectations.
Evaluate the design and effectiveness of technology controls supporting critical business processes, applications, and infrastructure.
Identify control weaknesses, emerging risks, process improvement opportunities, and potential efficiencies.
Support the IT Audit Director in developing and executing the annual IT Audit Plan and long-term audit strategy.
Serve as a subject matter expert in areas including cybersecurity, cloud technologies, APIs, middleware, DevSecOps, networking, database platforms, AI governance, and technology resilience.
Assess compliance with regulatory requirements and industry frameworks, including FFIEC guidance, GLBA, NIST, CIS, SOX, and applicable privacy regulations.
Lead audits of technology transformation initiatives, digital banking platforms, third-party technology providers, and cloud service environments.
Perform and oversee IT General Controls (ITGC) reviews and SOX testing activities.
Utilize data analytics and automation tools to identify trends, anomalies, and control gaps.
Prepare high-quality audit reports, presentations, and executive summaries for senior management and Audit Committee reporting.
Validate management action plans and remediation efforts related to audit findings and regulatory observations.
Support internal and external examinations, regulatory reviews, and independent assessments.
Build and maintain effective relationships with technology, risk, cybersecurity, compliance, and business leaders across the organization.
Mentor and provide guidance to junior audit staff while promoting knowledge sharing and continuous improvement.
Remain current on emerging risks involving cybersecurity, artificial intelligence, cloud computing, digital assets, and evolving regulatory expectations.
Deliver high-quality audits within established timelines and budget expectations and with minimal supervision while maintaining professional skepticism and independence.