Auditor null

About the role

The Enterprise Technology Audit Group is comprised of four teams responsible for IT Governance, Information Security, Infrastructure, and CIO Applications and is looking to fill an IT Auditor position to support the coverage of the IT Governance, IT Infrastructure, Risk Management, Access Management, and Application Development to include evaluating systems development life cycle, change management, computer operations, and information security risks and controls focused primarily on the application and database layer.

Responsibilities

• Establish & maintain relationships with business partners, and relevant stakeholders, and identify emerging risks as part of ongoing business monitoring activities
• He / She will be part of audit engagements that are generally small to moderate in size and complexity, and on occasions, may handle multiple assignments.
• The Auditor will be responsible to assist the teams in the preparation of Walkthrough documents, identification of Processes, Risks & Controls, the performance of control effectiveness testing, drafting of the findings, and having discussions with business partners.
• The Auditor exhibits an understanding of business & infrastructure functions and the underlying technology, operational, financial, and regulatory aspects
• Develop and demonstrate a strong understanding of audit approach and methodology;
• Perform process walk-throughs, assess risks, and perform control effectiveness testing;
• Demonstrate professional ability to credibly challenge the status quo;
• Present audit results in an objective and unbiased manner;
• Write audit issues reflecting relevant facts that lead to logical conclusions;
• Escalate significant risks and loss exposures to appropriate levels of management;
• Support other team members, if needed through the audit process.
• Work effectively in a team environment and across all organizational levels, where flexibility, collaboration, and adaptability are important

Required qualifications and experience

• Relevant Post-Graduation degree;
• 0-3 years of work experience in Technology Governance, Risk Management, and/or IT Security with at Technology Audit;
• A professional auditing, security, or accounting designation e.g., CISA, CISSP, CPA, CA, CIA, CCNA, CISM, CRSIC or to have substantially completed the requirements for such a designation while actively pursuing the completion of such a designation
• Background of Technology Audit, preferably within international financial service organizations;
• Experience with general Information Technology control reviews as well as application control reviews;
• Experience in medium to large-scale application reviews and system development projects, and ability to perform reviews on various platforms (e.g., Unix, Windows, i-Series, z/OS, SQL DB, Oracle DB, network devices)
• Good knowledge or ability to learn quickly system development methodologies, information security controls, access management, technology governance, and risk management;
• Knowledge of information security management frameworks (e.g. COBIT, ISO 2700x, ITIL, NIST Cybersecurity Framework, SANS Top 20 Critical Security Controls);
• Ability and zeal to build domain knowledge and overall business acumen;
• Sound knowledge and understanding of audit methodologies and tools that support/or processes, and / or orientation to risk and controls;
• Excellent verbal, written, and interpersonal communication skills;
• Strong organizational, multitasking, and prioritizing skills;
• Ability to work effectively in a team environment and across all organizational levels, where flexibility, collaboration, and adaptability are important in fast-paced
• Ability to execute in a fast paced, demanding environment while balProblem-solving priorities;
• Problem solving attitude;
• Good analytical skills with high attention to detail.
• Ability to work with minimal supervision and exercise independent judgment consistent with department guidelines.