Sr. IT Auditor

Cathay Bank•El Monte, CA

About The Position

The Senior IT Auditor is responsible for Information Technology (IT), Information Security (IS), and integrated audits, as well as special projects under the direction of IT audit management. The role assists Internal Audit management with project planning, execution, and reporting. There are no direct reports. The Senior IT Auditor owns assigned audit process areas from planning through testing, reporting, and remediation testing, in accordance with professional and department standards and a risk-based approach. The role includes recommending internal control improvements and operational efficiencies, preparing audit reports, ensuring conclusions are properly supported, and managing project budgets and deadlines. The auditor communicates updates, delays, issues, and concerns to management, partners with process owners on continuous improvement, stays informed about emerging IT and IS risks, and maintains a general understanding of the Bank’s business activities, objectives, laws, regulations, and risks. The position may also participate in approved special projects, investigations, or other significant business issues.

Requirements

Bachelor’s degree in Accounting, Finance, Information Technology, or a related field; an equivalent combination of education and relevant experience may be considered.
At least 3 years of IT/IS audit-related work experience in public accounting or private-industry internal audit, including at least 2 years in banking or financial services.
Hands-on experience independently executing information security and technology audits, including assessing process design, control execution, supporting evidence, and underlying technical configurations, and developing audit observations and conclusions.
Audit experience across asset, incident, problem, change, and systems development lifecycle management; data governance; network security and management; database security and management; security monitoring, detection engineering, incident response, IAM/PAM, vulnerability and patch management, and configuration hardening.
Experience with cloud, endpoint, and platform security; operating system security; retail and wholesale payment systems; and regulatory and industry frameworks, including GLBA Section 501(b), FFIEC, NIST, ISO, and COBIT.
Ability to work independently and collaboratively.
Knowledge of the financial industry and related markets, regulatory bodies, and current industry events and trends.
Strong understanding of risk assessment, audit methodology, and IT/IS audit execution, including identifying risks, assessing controls, developing and executing tests, evaluating technical configurations and evidence, and communicating clear, well-supported conclusions.
Strong time-management and organizational skills, including the ability to manage multiple projects and competing priorities.
Sound judgment in executing assignments and communicating with others.
Excellent verbal and written communication, interpersonal, and presentation skills, including the ability to work collaboratively with people at all organizational levels.
Strong analytical thinking, attention to detail, and ability to proactively identify issues and assist in their resolution.
Excellent computer skills and proficiency in Microsoft Office products, including Excel, PowerPoint, and Word.

Nice To Haves

Master’s degree in management information systems or a related discipline.
CISA, CISM, CISSP, or another relevant professional certification.
Additional qualifications such as CFE, CIA, or CAMS.

Responsibilities

Own assigned audit process areas for Information Security, IT, and integrated audits, including planning, testing, reporting, and remediation testing.
Execute audits using a risk-based approach and recommend internal control improvements, operational enhancements, and efficiencies.
Prepare audit deliverables, including planning memoranda and reports, ensuring they meet department guidelines and support the conclusions reached.
Manage audit budgets and deadlines and provide timely project updates to management.
Complete assignments within established time frames and promptly communicate delays, issues, and concerns to Internal Audit management.
Partner with process owners to promote continuous process improvement, efficiency, and standardized practices.
Stay informed about emerging IT and IS risks relevant to the Bank.
Maintain a general understanding of business activities, objectives, applicable laws and regulations, and risks affecting the Bank and industry.
Identify opportunities for and participate in approved special projects, investigations, or other significant business issues.