Sr. IT Auditor

Job Description

The mission of Visa’s Internal Audit team is to enhance and protect Visa’s organizational value by providing risk-based and objective assurance, advice and insight on the state of Visa’s risk and control environment. The Senior IT Auditor will work under the supervision of an IT Audit Manager or IT Audit Senior Manager to execute multiple aspects of the Internal Audit annual plan.

• Execute audit fieldwork including testing the design and operating effectiveness of controls.
• Serve as a key contact with client management, explaining the audit process and scope, keeping management apprised of audit progress and issues, and effectively delivering audit results to all levels of management.
• Assist in the execution of Internal Audit innovation activities such as those around advanced data analytics, audit process automation and continuous auditing.
• Stay abreast of company business strategies, IT industry technology advances and the risk profile of assigned business areas to ensure relevancy of audit approach.

• Assist audit management in preparation for engagement risk assessment, planning and audit scope development.
• Participate in developing the audit work program, in consultation with audit management, for efficient and effective testing of key controls.
• Execute specific areas of an audit project under the supervision of the audit management, performing audit work using Visa’s standard audit methodology to evaluate risk, determine control objectives, and verify the extent to which client techniques meet objectives.
• Document test results in work papers ready for audit management review.
• Inform audit management of project status and results.
• Interact with client management to assess audit findings including control weaknesses with an appropriate degree of professional skepticism, keep audit management informed of audit findings, and assist business partners with the development of Management Action Plans to mitigate weaknesses, and evaluate adequacy of management’s response. Where appropriate, test corrective actions taken.
• Maintain business relationships with appropriate levels of client management to ensure that audit management is aware of changes in business activities and objectives and, if necessary, an audit response is developed.
• Demonstrate good written and oral communication skills to the appropriate levels of Visa and audit management during the audit process.
• Demonstrate understanding of Visa’s and Internal Audit’s strategic vision, be a self-starter, and responsible for actions promoting this strategic vision.
• Interact with audit project team members in working towards departmental goals.

This is a hybrid position. Expectation of days in office will be confirmed by your hiring manager.

2 or more years of work experience with a Bachelor’s Degree or an Advanced Degree (e.g. Masters, MBA, JD, MD, or PhD)

3 or more years of work experience with a Bachelor’s Degree or more than 2 years of work experience with an Advanced Degree (e.g. Masters, MBA, JD, MD)

Bachelor’s degree in computer science, management information systems, or in STEM (Science, Technology, Engineering, or Math).

• 3-6 years of technical experience in one or more of the following domains: information security, distributed operating, databases, network technology, mobile payments, tokenized services, cloud-based and virtualized environments, IBM mainframe, or Hadoop.
• Experience in working on audit project teams in a complex operational and regulatory environment that includes mainframe distributed and network technology platforms.
• Experience evaluating system controls associated with complex business applications.
• Strong time management skills.
• Good analytical, organizational and presentation skills.
• Very good written and oral communication skills.
• Ability to travel domestically and internationally approximately 10% - 25%.

• One or more IT Audit certifications or other audit related certifications (e.g., CISA, CFE, CRISC, etc.).
• One or more Technical certifications or other information security certifications (e.g.,…