Senior IT Auditor

Purpose: The Senior Information Technology Auditor leads the planning and execution of audits that evaluate the adequacy and effectiveness of critical technology and information security functions including data management, cybersecurity, vendor/cloud-based technology solutions, and IT general controls. Audits of financial and operational control activities are also performed as assigned. Audit coverage includes Sarbanes – Oxley Section (SOX) 404 key control testing.

Risk assessments are performed of business activities with relevant testing performed based on the risks and processes associated with the area audited. The Senior Information Technology Auditor develops and utilizes analytics software and automation to assist in audits. The Senior Information Technology Auditor also acts as a mentor to others.

Essential Functions:

• By leveraging available data and analytical tools and utilizing and interpreting various audit, accounting and regulatory compliance reference resources and other relevant sources, develops the scope of assigned internal audits and SOX 404 testing, selects and develops appropriate audit procedures for work programs to achieve audit objectives within hours budgeted. Discusses and reviews work programs with department supervisory staff and/or others assigned to the audit prior to commencing test work to maintain consistent, effective audit coverage.
  
  Recommends changes and improvements to established work programs and audit testing approaches as appropriate.
• Evaluates the design and operating effectiveness of the system of internal controls, adherence to established policies and procedures, and regulatory guidance and conducts test work as outlined in the audit work program. Utilizes judgment as to expansion of scope, further test work needed based on trends or exceptions identified. Prepares work paper documentation via software applications to support test work performed and conclusions reached.
  
  Explains, clarifies or corrects documentation to clear any review notes generated by the department supervisory staff or audit lead personnel’s review of the work papers, conclusions and recommendations.
• Provides information and supporting documentation for all issues uncovered as a result of the audit to prepare preliminary exit sheets, which detail the level of risk, and proposed solutions to correct the existing issue, prevent future occurrences and add value to the organization. Leads exit meetings with management and other Internal Audit department supervisory staff to discuss proposed recommendations to come to agreeable solutions.
  
  Prepares written audit reports to summarize the audit scope, control findings, recommendations and management commitments.
• Proactively seeks out learning opportunities to enhance skills and competencies related to role.
• Manages/works with outsourced technology audit engagements and works with external auditors to ensure IT financial reporting control audit requirements are fulfilled. As assigned, manages financial and operational audit engagements and works with external auditors to ensure financial reporting control audit requirements are fulfilled.
• Assists in mentoring and training audit staff.
• Is a contributing member of project teams as assigned. Provides consulting services to management in developing appropriate internal controls for new products and/or processes as well as enhancements to existing products and/or processes.
• Demonstrate the standards and principles of the Five Star Bank experience in every interaction with internal and external customers, associates, and stakeholders. Incorporate the high-performance behaviors of teamwork, leading by example, and service in every facet of work.

• Education:
  
  Bachelor’s Degree in Information Systems, Information Technology, Data Management / Analytics, Accounting, Auditing, Finance, or related field
• Prior
  
  Experience:
  
  5+ years of experience in information systems auditing, in information systems risk management, or a combination and 4+ years of IT Sarbanes Oxley (SOX) testing experience, e.g., key reports, automated controls, IT general and application controls.…