Audit Manager - IT Audit

IDB Bank; New York (NY); Hybrid; USD 120,000 - 170,000; Full time

Benefits offered by this job

Healthcare coverage

401(k) plan

Paid time off

Job summary

IDB Bank in New York, NY seeks an Audit Manager - IT Audit with 8–10 years for leading IT and cybersecurity audits. You will design risk-based programs, test controls, draft findings, and drive remediation. The role emphasizes collaboration with stakeholders and adherence to regulatory guidance across FFIEC, GLBA, NYSDFS, ISO 27002.

The position offers a hybrid schedule, competitive base salary in a broad range, and a strong benefits package including PTO, medical coverage and 401(k).

Qualifications

• 8–10 years of information technology audit experience in financial services and/or public accounting
• Experience across audit lifecycle: planning, risk assessment, scoping, testing, reporting and follow-up
• Strong project management/time management; able to balance priorities and deliver on time/budget
• Knowledge of IT risk areas: security, SDLC, change management, IT operations, IT governance
• Familiarity with regulatory guidance (FFIEC, GLBA, NYSDFS, ISO 27002) and frameworks
• Big 4 background is a plus
• CISA or CISSP-like certifications preferred (CISA, CISSP, CRISC, CIPP, CGEIT, CISM, CIA)

Responsibilities

• Develop risk-based IT audit program and execute test steps with quality work papers
• Update auditable entity risk assessments aligned to regulatory expectations
• Execute IT and integrated audits, identify risks and root causes, and draft findings
• Prepare audit reports and follow-up on issue closure and remediation evidence
• Stay current on IT trends and regulatory changes to inform audit planning
• Build collaborative relationships with stakeholders and maintain independence
• Present audit observations to management and participate in department initiatives

Skills

IT audit

Project management

Communication

Adaptability

Independence

Education

Bachelor's degree in IT/Business/Finance

Tools

COBIT

ITIL

NIST

Job description

Company Description

Audit Manager - IT Audit - VP Level

• New York, NY, USA
• Full-time

For more than 70 years, IDB Bank has made it our mission to be the best bank for our clients by putting their needs first, and the success we have enjoyed fundamentally comes down to our people. Here at IDB, you will work side by side with some of the most talented professionals in the industry who share a strong sense of teamwork and a passion for providing exceptional service down to the smallest detail. We offer a comprehensive benefits package that includes generous paid time off and the ability to participate in our medical coverage and 401(k) plan on your very first day with us. We are also committed to diversity and inclusion, and to providing all of our team members with an equal opportunity to succeed and make meaningful contributions within a work environment that is respectful, welcoming and inclusive.

Job Description

The Audit Manager role is responsible for performing the responsibilities of an in-charge auditor. The auditor will play a critical role in shaping the IT Audit function, working across audit functions, and fostering AI enabled capabilities. The role will be leading and executing information technology and cybersecurity audits encompassing IT general controls, application functionality controls (e.g. dual controls, edits and validation checks, workflows, thresholds, etc.), IT processes (e.g. IT asset management, third-party risk management, data flows / interfaces, risk management, data governance and management, governance, IT operations), IT infrastructure (e.g. Windows and Linux operating systems, databases, networking), project and initiatives utilizing information technology control frameworks, such as NIST CSF, ITIL, COBIT, and FFIEC, or other relevant regulatory guidance (e.g. NYSDFS 500, GLBA, etc.), where applicable.

Essential Functions

• Support development of a risk-based audit program, document and execute test steps and high-quality work papers for IT and integrated application audits, with alignment to current regulatory requirements and expectations (e.g. FFIEC, NYSDFS 500, GLBA, etc.) and emerging risks.
• Proactively contribute to the timely updating of auditable entity risk assessments in support of the development and maintenance of the audit plan, while taking in account IT audit standards and frameworks (e.g. ITIL, COBIT, FFIEC, ISO 17799, ISO/IEC 27002, etc.), data security and privacy regulations, emerging regulatory themes, and industry best practices.
• Execute all phases of high value IT audits, identify risks, assess mitigating controls, determine “root causes” and make value-add recommendations to improve the control environment through well-developed audit reports.
• Assist in the preparation of audit reports and draft findings.
• Stay abreast of industry IT trends to identify potential issues and risks, as well as relevant best practices, laws, rules and regulations impacting financial institutions and ensuring that the changes are incorporated into the audit planning and risk assessment process. Leverage knowledge of systems and data to perform and document all reviews in a manner consistent with acceptable professional standards, including supporting audit procedures, findings and results. Follow-up on open audit issues and validate their resolution, review evidence of closure of findings and determine that evidence of remediation is appropriate to effectively mitigate the risks raised.
• Develop strong collaborative relationships with stakeholders and serve as a trusted risk and control advisor while maintaining objectivity and independence in both fact and appearance.
• Follow-up on open audit issues and validate their resolution, review evidence of closure of findings and determine that evidence of remediation is appropriate to effectively mitigate the risks raised.
• Effectively present/communicate audit observations to management, as requested by audit management.
• Participate in department-wide initiatives and perform other duties as assigned.

Qualifications

• 8 - 10 years of information technology audit experience in financial services and/or public accounting firm.
• Demonstrated experience in executing all aspects of the audit lifecycle, including planning, risk assessment, scoping, detailed testing, reporting, issue follow-up and validation.
• Strong project management and time management skills, ability to effectively balance competing priorities, and demonstrated success in delivering on-time and on-budget work product.
• Bachelor's degree in Information Technology, Business, Accounting, Finance or related field is required.
• Knowledge, understanding and experience in one or more information technology risk and control areas including logical and physical security, system development lifecycle (e.g. Agile and Waterfall), change management, IT operations, business continuity management and infrastructure (network, operating systems, databases, data center, etc.).
• Knowledge and experience utilizing relevant industry frameworks and regulatory guidance (e.g. COBIT, ITIL, NIST, FFIEC, ISO 27002, etc.) and applicable banking regulations.
• Demonstrated ability to adapt quickly to changing demands and environment and rapidly develop in-depth knowledge of new audit areas.
• Excellent verbal and written communication skills and ability to professionally and effectively interact with all levels of management.
• Ability to utilize appropriate tools to enhance the audit process.
• Prior Big 4 experience is a plus.

One Of The Following Certifications Is Preferred:

• Certified Information System Auditor (CISA)
• Certification specific to the information technology industry such as, Certified Information Systems Security Professional (CISSP), Certified in Risk and Information Systems Control (CRISC), Certified Information Privacy Professional (CIPP), Certified in the Governance of Enterprise IT (CGEIT), Certified Information Security Manager (CISM), Certified Internal Auditor (CIA).

Compensation

The expected annual salary for this position is between $120,000 and $170,000 at the start of employment. A salary offer is determined on an individualized basis, taking into consideration factors such as an individual's skills and experience. In addition to base salary, our total rewards package also includes eligibility for an annual bonus, medical, pharmacy, dental and vision plans, life and disability insurance, employee wellness program, retirement and savings plans with employer contributions, generous holiday and paid time off schedules, parental leave and tuition reimbursement.

Additional Information

We are operating on a Hybrid schedule.

Disclaimer

The above statements are intended to describe the general nature and level of work being performed by people assigned to this classification. They are not to be construed as an exhaustive list of all responsibilities, duties, and skills required of personnel so classified. All personnel may be required to perform duties outside of their normal responsibilities from time to time, as needed.

The above statements are intended to describe the general nature and level of work being performed by people assigned to this classification. They are not to be construed as an exhaustive list of all responsibilities, duties, and skills required of personnel so classified. All personnel may be required to perform duties outside of their normal responsibilities from time to time, as needed.

All your information will be kept confidential according to EEO guidelines.

The Bank Will Make Reasonable Accommodations To The Following Employees To Allow Them To Perform The Essential Functions Of Their Position, Except Where Doing So Would Result In Undue Hardship To The Bank:

• Those with a known mental or physical disability.
• Pregnant individuals and/or individuals with pregnancy or childbirth-related medical conditions.
• Victims of domestic violence, sex offenses or stalking.
• Employees with religious observance and practice obligations.

Any employee who believes he or she needs an accommodation for any of the above reasons should contact their supervisor or a member of Human Resources to request such an accommodation. In each case, the Bank will engage in a good faith written or oral dialogue concerning the individual’s accommodation needs; potential accommodations that may address the individual’s accommodation needs, including alternatives to a requested accommodation; and the difficulties that such potential accommodations may pose for the employer.

The Bank retains the ultimate discretion to choose the appropriate reasonable accommodation. Upon reaching a final determination at the conclusion of the cooperative dialogue, the Bank will provide the requesting individual with a written final determination identifying any accommodation granted or denied. In addition, the Bank will maintain any information regarding the employee’s request and status in the strictest confidence, except as requested by the employee, as required on a need-to-know basis or as otherwise required by law.

IDB BANK, INCLUDING ITS SUBSIDIARIES AND DIVISIONS, PROVIDES EQUAL EMPLOYMENT OPPORTUNITIES TO ALL EMPLOYEES AND APPLICANTS FOR EMPLOYMENT WITHOUT REGARD TO RACE, COLOR, RELIGION, SEX, SEXUAL ORIENTATION, NATIONAL ORIGIN, AGE, DISABILITY, GENETIC STATUS, CITIZENSHIP STATUS, MARITAL STATUS, MILITARY OR VETERAN STATUS, CURRENT UNEMPLOYMENT OR ANY OTHER LEGALLY PROTECTED CATEGORY IN ACCORDANCE WITH APPLICABLE FEDERAL, STATE AND LOCAL LAW. NOTHING IN THIS SITE CONSTITUTES A PROMISE OR OFFER OF EMPLOYMENT.

IDB BANK, INCLUDING ITS SUBSIDIARIES AND DIVISIONS, PROVIDES EQUAL EMPLOYMENT OPPORTUNITIES TO ALL EMPLOYEES AND APPLICANTS FOR EMPLOYMENT WITHOUT REGARD TO RACE, COLOR, RELIGION, SEX, SEXUAL ORIENTATION, NATIONAL ORIGIN, AGE, DISABILITY, GENETIC STATUS, CITIZENSHIP STATUS, MARITAL STATUS, MILITARY OR VETERAN STATUS, CURRENT UNEMPLOYMENT OR ANY OTHER LEGALLY PROTECTED CATEGORY IN ACCORDANCE WITH APPLICABLE FEDERAL, STATE AND LOCAL LAW. NOTHING IN THIS SITE CONSTITUTES A PROMISE OR OFFER OF EMPLOYMENT.

Kindly review our Privacy Notice and GLBA Consumer Privacy Notice.