Sr. Manager - IT Audit

Mortgage Assets Management, LLC•Houston, TX

About The Position

The Senior Manager - IT Audit will be responsible for providing high-quality internal audits that ensure procedural and regulatory standards are met. The Senior Manager - IT Audit will be required to follow the Internal Audit Policies and Procedures that are aligned with the Institute of Internal Auditors (IIA) International Standards for the Professional Practice of Internal Auditing.

Requirements

Bachelor’s degree in MIS, Computer Science, or related field required.
CISA,CISSP, and/or CISM certification(s) or commitment to obtaining an appropriate professional certification.
8+ years of IT risk management experience in professional services and/ or relevant IT internal audit industry experience that includes executing risk-based IT-related audits and/ or risk and control assessments, leveraging IT governance and control frameworks such as COBIT, NIST 800 series, and methodologies for IT SOX internal control programs required.
Subject matter expert in IT concepts such as logical and physical security (including cloud-based), network, database, computer operations, and software development is required.
Proficiency with Microsoft Office (MS Excel, MS Outlook, MS PowerPoint, MS Word and MS Visio) is required.
Proven analytical skills.
Effective problem-solving skills.
Strong verbal and written communication skills.

Nice To Haves

Knowledge of financial services or mortgage industry is a plus.

Responsibilities

Assist Internal Audit leadership with maintaining a compliant Internal Audit methodology, including all supporting materials (e.g., policies, procedures, workpaper standards, charters, etc.) and oversight/governance structure.
Participate in the annual risk assessment to identify the audit universe; constantly maintain the risk assessment and audit universe to ensure that it properly identifies and considers emerging risks. Ensure the risk assessment and audit universe is inclusive of all risks: financial, operational, compliance, technology, human resources, etc.
Lead IT internal audit engagements and assessments as determined in the approved annual Internal Audit Plan, including the evaluation of IT General Controls, Application Controls and IT security related Internal Controls and focusing on complex, judgmental and/or specialized issues.
Take responsibility for multiple engagement assignments by using time wisely, prioritizing tasks according to risk and feedback from supervisor / management and bringing assignments to completion within established timeframes with limited supervision.
Lead audit risk assessments of Information Technology processes and systems, planning, and developing audit programs to ensure the business has adequate internal controls. Ensure the audit scope is accurately defined and audit procedures achieve the completion of that scope.
Lead efforts to collect information, IT policies and procedures and perform detailed assessments of information technology systems and infrastructures to verify systems are secure and support the related applications or business processes and are in compliance with security standards and regulations.
Utilize knowledge of emerging technology to identify technological developments and evaluate impacts on the business and provide recommendations to strengthen and improve the business.
Prepare clear, accurate, and well-organized audit work papers that appropriately document the testing performed. Work papers should include planning documents, engagement notifications, and source documentation needed for testing, flowcharts, walkthroughs of processes and testing of controls.
Prepare audit reports that reflect audit results and recommend opportunities for improvement to processes. Monitor remediation progress and perform remediation testing.
Supervise and coordinate work assignments amongst audit team members. Provide timely feedback, on-the-job guidance, training, and coaching to audit staff.
Assist Internal Audit leadership with developing new strategies for audit, focusing on emerging technologies, robotic process automation, and data analytics.
Develop a thorough understanding of the Company’s operations.
Serve as a subject matter expert of applicable IT, SOC, and cybersecurity standards.
Serve as a leader and trusted advisor, maintaining effective relationships with executive management and members of the team and business.
Travel to other locations for auditing and training purposes, as required.
Perform any additional relevant job responsibilities requested by the Senior Director Internal Audit.