Senior IT Internal Audit Lead, Sr. Assoc

Federal Home Loan Bank of San Francisco•San Francisco, CA

12d•$130,000 - $155,000

About The Position

Purpose: The Internal Audit function provides the Bank with objective and independent assurance services to support the Bank in its mission and help achieve its objectives through proactive risk management. The Senior IT Audit Lead will perform audits in the areas of information security and information technology. We are seeking candidates with experience in the financial services industry who are self-driven and appreciate working in a collaborative team environment. Major Accountabilities: Lead planning, scheduling and preliminary analysis for assigned audit projects. Coordinate audit activities for assigned audit projects, including notification of all affected parties of audit timing, scope, objectives, approach and deliverables. Identify, document, and map IT/IS processes and internal controls of applicable infrastructure and operational areas per the scope of the audit project. Perform and/or review risk assessments of IT/IS infrastructure and operational processes and controls for assigned areas. Perform validation of regulatory findings Lead risk-based audit programs to achieve IT/IS audit objectives for assigned audit projects, and incorporate Data Analytics, as appropriate. Perform or lead, as needed, audits related to IT/IS ensuring compliance with IA and industry (including IIA) standards. Lead the identification of opportunities for the usage of Data Analytics in the audit process through data collection, and analysis, and during audit execution. Support integrated audits that cover financial, operational, and business areas of focus with technical expertise related to IT/IS, and incorporate the usage of Data Analytics, as appropriate. Conduct assessments of new products, systems, and technologies and provide technical expertise related to IT/IS. Complete audit testing, inquiry, and other analysis required to meet objectives of assigned audit projects. Complete working papers evidencing performance of all audit work. Communicate progress and results of audit throughout the audit engagement to auditee and management. Develop value added recommendations to deal with issues identified during assigned audits and draft audit reports to formally communicate the results of the audit and related recommendations. Perform reviews of implemented audit recommendations. Maintain internal department Manual, Procedures/Standards, and tools, including the Global Risk and Compliance (GRC) in accordance with Bank policies.

Requirements

Bachelor’s degree in Information Systems, Computer Sciences, or related field, or equivalent experience.
Minimum five years internal or external audit experience is required, public accounting firm or financial services industry experience preferred.
Strong understanding of technology processes (e.g., change management, access management, computer operations) and application controls within a regulated environment.
Sound understanding of audit process/methodology and risk management/advisory ability.
Experienced in using a risk-based audit approach in evaluation of recommendations for management processes.
Ability to adapt to a changing environment, meet deadlines and handle multiple projects.
Excellent communication, interpersonal, time management and issue resolution skills.
Excellent communication skills, interpersonal and issue resolution skills.
Able to operate PC-based software and/or automated database systems required.
Customer Focus, Decision Quality, Ensures Accountability, Drives Results, Collaborates, Values Differences, Communicates Effectively, Instills Trust.

Nice To Haves

Certified Information Systems Auditor (CISA) and/or Certified Information Systems Security Professional (CISP) strongly preferred.
public accounting firm or financial services industry experience preferred.

Responsibilities

Lead planning, scheduling and preliminary analysis for assigned audit projects.
Coordinate audit activities for assigned audit projects, including notification of all affected parties of audit timing, scope, objectives, approach and deliverables.
Identify, document, and map IT/IS processes and internal controls of applicable infrastructure and operational areas per the scope of the audit project.
Perform and/or review risk assessments of IT/IS infrastructure and operational processes and controls for assigned areas.
Perform validation of regulatory findings
Lead risk-based audit programs to achieve IT/IS audit objectives for assigned audit projects, and incorporate Data Analytics, as appropriate.
Perform or lead, as needed, audits related to IT/IS ensuring compliance with IA and industry (including IIA) standards.
Lead the identification of opportunities for the usage of Data Analytics in the audit process through data collection, and analysis, and during audit execution.
Support integrated audits that cover financial, operational, and business areas of focus with technical expertise related to IT/IS, and incorporate the usage of Data Analytics, as appropriate.
Conduct assessments of new products, systems, and technologies and provide technical expertise related to IT/IS.
Complete audit testing, inquiry, and other analysis required to meet objectives of assigned audit projects.
Complete working papers evidencing performance of all audit work.
Communicate progress and results of audit throughout the audit engagement to auditee and management.
Develop value added recommendations to deal with issues identified during assigned audits and draft audit reports to formally communicate the results of the audit and related recommendations.
Perform reviews of implemented audit recommendations.
Maintain internal department Manual, Procedures/Standards, and tools, including the Global Risk and Compliance (GRC) in accordance with Bank policies.