Director - Internal Audit Information Technology

TDECU; Krosno; Hybrid; PLN 521,000 - 707,000; Full time

Job summary

Texas Dow Employees Credit Union seeks a Director of Internal Audit Information Technology to lead IT audit activities and oversee external audit engagements. The role partners with executive management to assess IT controls, mitigate risks, and drive improvements in information security and governance.

The ideal candidate has 10+ years in IT internal audit within financial services, strong leadership, and expertise in COBIT/NIST frameworks.

Qualifications

• Bachelor's degree in Information Technology, Computer Science, Accounting or Business is required.
• Masters in Accounting, business or related degree preferred.
• Certifications: CISA required; CISSP/CISM/CIA/CPA preferred; CFSA/CRP desirable.

Responsibilities

• Plan, execute, and oversee IT audit activities.
• Manage IT audits conducted by external audit firms and ensure regulatory compliance.
• Develop and implement risk-based audit plans and strategies.
• Lead and mentor audit team, manage resources and budgets.
• Present audit findings to senior leadership and Board Audit Committee.
• Identify process improvements and drive changes across the organization.

Skills

IT audit

COBIT

NIST

Regulatory compliance

Risk management

Leadership

Audit planning

Communication

Education

Bachelor's degree in IT/CS/Accounting/Business

Master's degree preferred

Tools

COBIT framework

NIST CSF

Audit management tools

Job description

Position Title: Director - Internal Audit Information Technology

Reporting Manager Title: SVP - Chief of Audit

FLSA Status: Exempt

Work Arrangement: Hybrid

Date Created: 1/2025

Date Revised:

Created By: Janet Pruitt

Position Summary:

The Director of Internal Audit Information Technology will be responsible for planning, executing, and overseeing all aspects of IT audit activities within the credit union. This role includes primarily performing comprehensive IT audits, managing the oversight of IT audits conducted by external consulting audit firms, and ensuring compliance with industry regulations and best practices. The IT Director will work collaboratively with executive management and other departments to provide assurance on the effectiveness of IT-related controls, identify opportunities for improvement, and mitigate risks related to information technology.

Essential Duties and Responsibilities:

• Partners with all levels of management and line of business to develop creative and innovative business-oriented solutions to improve controls, mitigate risks, and influence positive change.

• Collaborates across the three lines of defense regarding business processes, risks, and controls. Identify thematic risk trends across the organization. Continuously monitor for changes in the organizational risk profile and/or operational environment and modify the audit schedule, risk assessment, and audit universe as necessary.

• Builds and maintains strong relationships with business partners across the organization to help them align their business strategy with appropriate risk management practices and controls.

• Leads the development and implementation of an audit plan and strategy using an appropriate risk-based methodology, including performing and designing assigned audit entity risk assessments to support a forward-looking, strategically aligned audit plan. Additionally, trains the team on the use of audit workpapers.

• Determines appropriate audit cycles, necessary resources, and estimated expenses associated with the completion of the forward-looking 12 - 18-month audit plan. Presents sections of Audit Plan to senior leadership and the Board Audit Committee for approval. Monitor advancement of assigned audit engagements, in contrast, to plan and make essential adjustments.

• Assess the adequacy of management's action plans for addressing and correcting audit findings and issues. Monitor through regular follow-up, the progress of management action plans.

• Oversee the IA Department technology and IT vendor management activities. Lead with soliciting/analyzing proposals and negotiating third party audit engagements.

• Designs process improvements and standardization of audit processes, methodologies, and guidelines. Evaluate current audit approaches and practices and provide thought leadership on industry best practices to drive maturation and evolution of the Audit Department. Work with the audit team to ensure consistency and compliance with both internal and professional standards.

• Represents the audit division at quarterly Board Audit Committee meetings. Prepares and presents audit reports/results, audit plan status, and corrective action plan updates to the Audit Committee.

• Manages ongoing assessments of the changing risk profile including closely interfacing with management to ensure understanding and controls to ensure it is effective, collaborative, and inclusive.

• Conducts financial, operational, and compliance audits, which includes, but is not limited to planning, fieldwork, and report writing phases of the audit. Effectively identify control gaps, analyze underlying root causes, and communicate to management ensuring effective action plans have been identified.

• Recruits and develops team members needed to meet department objectives and strategy. Manages, coaches, and mentors audit team members with focus on career development and succession.

• Contributes to development of monthly/quarterly Audit Committee package.

If applicable, please provide:

# of Direct Reports:

2

# of Indirect Reports:

6

Minimum Qualifications:

Education:

• Bachelor's Information Technology, Computer Science, Accounting or Business from an accredited university is required.
• Masters Accounting, business or related degree preferred.

Licensure:

• Certifications: Certified Information Systems Auditor (CISA) required. Additional certifications such as Certified Information Systems Security Professional (CISSP),
• Certified Information Security Manager (CISM), Certified Internal Auditor (CIA) or Certified Public Accountant (CPA) preferred.
• Certified Financial Services Auditor (CFSA) and Certified Risk Professional (CRP) are other certifications that are desirable.

Experience:

• Ten years of experience as an information technology internal auditor managing audit engagements in a financial institution or a related organization.
• Senior level audit management experience.
• Seven to Ten years of supervisory/ managerial experience.
• Proficiency in IT COBIT, NIST Cybersecurity Framework (CFS), Information Security Management, in-depth knowledge of internal audit standards, procedures and techniques required for performing engagements and best practices.

Knowledge, Skills, and Abilities:

• Strong proficiency in IT audit methodologies, IT risk management, cybersecurity, and regulatory requirements for financial institutions.
• Exceptional analytical, problem-solving, and decision-making abilities.
• Strong system data analytic knowledge and proficiency.
• Strong ability to present complex IT issues to non-technical stakeholders.
• Strong in using audit workpaper management tools and IT audit frameworks.
• Strong interpersonal, leadership, and communication (both written and oral) skills.
• Ability to engage and influence senior executives, establish and maintain collaborative partnerships, and provide thought leadership to strategic decisions.
• Excellent planning and operational deployment skills; ability to translate vision, strategy, and business requirements into clear actionable goals.
• Strong strategic and process thinking abilities; takes a broad perspective and makes connections.
• Proactively looks for opportunities, solutions, and process improvements. Manages projects, milestones and tasks, resources, and risks/dependencies.
• Ability to drive change, establish priorities and integrate work in a fast-paced environment, and achieve results.
• Demonstrate strong technical expertise, leadership skills, and strategic thinking to enhance IT audit function.
• Ability to work as a leader or participant of large, cross-functional teams or as an individual contributor.
• Unquestionable business and personal integrity and values congruent with those of the organization.
• Results-oriented with the ability to direct or manage multiple projects simultaneously.

Physical Demands and Work Environment:

(The physical demands and work environment characteristics described herein are representative of those that must be met by an employee to successfully perform essential functions of this position and/or may be encountered while performing essential functions. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.)

• While performing the essential duties of this position, an employee would frequently be required to stand, walk, and sit.
• Specific vision abilities required by this position include close vision, distance vision, and the ability to adjust focus.
• The noise level in the work environment is usually moderate.
• Our company offers a dynamic hybrid work arrangement, which requires three days of on-site work, in the Sugar Land, TX office.
• Ability to travel occasionally, up to 20%.

Disclaimer:

The above statements are intended to describe the general nature and level of work being performed by people assigned to this job. They are not intended to be an exhaustive list of all responsibilities, duties, and skills required of personnel so classified.

Texas Dow Employees Credit Union is an equal opportunity employer, dedicated to a policy of non-discrimination in employment on any basis including race, color, age, protected veteran status, sex, religion, disability, genetic information, national origin, or other status protected by federal, state or local law. Consistent with the American Disabilities Act, applicants may request accommodations needed to participate in the application process.