Senior IT Auditor

Job Description: IT Auditor

• Plan and execute IT audits across infrastructure, applications, cybersecurity, data, and third-party IT services, including risk assessments, audit programs, and testing approach
• Independently audit IT general controls (access, change management, operations, backups), application controls, cybersecurity, data privacy/governance, business continuity/DR, and IT vendor risk
• Evaluate control design and effectiveness; identify gaps, root causes, and business impact; resolve complex technical issues, escalating as needed
• Coordinate with financial/operational auditors on IT-dependent controls (system-based controls, interfaces, automated calculations) for integrated audits
• Stay current on emerging tech risks (cloud, APIs, AI/ML, fintech partnerships), leading IT audit practices, and regulatory developments (FRA IT/cybersecurity guidance)
• Draft and discuss audit findings/reports with IT and business management, and support the IT Audit Manager with reporting packages and performance tracking
• Maintain the IT issue tracking log and perform follow-up testing to confirm remediation, escalating overdue or high-risk issues
• Guide and coach junior IT auditors, support onboarding, and pursue certifications such as CISA, CRISC, CISSP, or CEH