Responsibilities:
Plan and execute internal audits in line with department and skilled standards.
Evaluate risks in auditable areas and create or restructure audit testing programs to address these risks.
Evaluate the design and operating effectiveness of internal controls over processes that include but are not limited to:
Workstation Security
Server / OS Operations
Network Operations
Security Operations
IT Asset (Hardware & Software) Management
Database Management
Mobile Device Management
Access Management
Software Development
Cloud Computing
Managed IT Services
Payment Solutions
Core Process Solutions
Cybersecurity
IT Governance / Information Security Program
Incident Response
Peer review workpapers.
May assist with Operational or Compliance audit procedures.
May assist with Third Party (e.g. SOC) or co-sourced/outsourced internal audits.
Perform other duties as assigned.
Relevant Regulations, Standards, or Frameworks:
Global IA Standards
FFIEC
PCI DSS
NIST CSF
Competencies:
Proficient knowledge of Microsoft Office Applications (e.g., Word, Excel, Power-Point, etc.)
Robust Written and Verbal Communication Skills
Solid Project Management Skills
Detail Oriented
Ability to apply professional judgment and critical thinking to:
Assess risk, materiality, and control effectiveness
Determine if evidence is sufficient and complete
Analyze root causes of issues
Effectively interpret and document processes.
Experience with data analysis is a plus.
Familiarity with AuditBoard is a plus.