Director – Internal Audit Information Technology

Texas Dow Employees Credit Union; Sugar Land (TX); Hybrid; USD 150,000 - 210,000; Full time

Benefits offered by this job

Hybrid work model

Job summary

Texas Dow Employees Credit Union is seeking a Director – Internal Audit Information Technology reporting to the SVP – Chief of Audit. The role oversees IT audit activities, collaborates with executive management, and provides assurance on IT controls across the organization in a hybrid work environment.

Responsibilities include leading risk-based IT audits, coordinating external IT auditors, developing audit plans, mentoring staff, presenting to the Audit Committee, and driving process

Qualifications

• Ten years IT internal audit experience in financial services or related field.
• Senior level audit management experience and cross-functional collaboration.
• Proficient in IT governance, risk management, COBIT, and NIST frameworks.
• Ability to lead audits, develop strategy, and mentor staff.

Responsibilities

• Lead IT audit planning, execution, and reporting.
• Oversee external IT audit engagements and vendor relationships.
• Develop forward-looking audit plans aligned with risk.
• Present findings and corrective action plans to Audit Committee.
• Monitor risk profile changes and adjust audit universe accordingly.
• Mentor and develop IA staff for succession.

Skills

IT Audit

IT Risk Management

Leadership

Stakeholder Communication

Regulatory Compliance

Education

Bachelor’s Information Technology/Computer Science/Accounting

Masters preferred

CISA certification

CISSP (optional)

CIA (optional)

CPA (optional)

CFSA (optional)

CRP (optional)

Job description

Position Title: Director – Internal Audit Information Technology Reporting Manager Title: SVP – Chief of Audit

FLSA Status: Exempt Work Arrangement: Hybrid Date Created: 1/2025 Date Revised: Created By: Janet Pruitt

Position Summary:

The Director of Internal Audit Information Technology will be responsible for planning, executing, and overseeing all aspects of IT audit activities within the credit union. This role includes primarily performing comprehensive IT audits, managing the oversight of IT audits conducted by external consulting audit firms, and ensuring compliance with industry regulations and best practices. The IT Director will work collaboratively with executive management and other departments to provide assurance on the effectiveness of IT-related controls, identify opportunities for improvement, and mitigate risks related to information technology.

Essential Duties and Responsibilities:

• Partners with all levels of management and line of business to develop creative and innovative business-oriented solutions to improve controls, mitigate risks, and influence positive change.
• Collaborates across the three lines of defense regarding business processes, risks, and controls.
• Identify thematic risk trends across the organization.
• Continuously monitor for changes in the organizational risk profile and/or operational environment and modify the audit schedule, risk assessment, and audit universe as necessary.
• Builds and maintains strong relationships with business partners across the organization to help them align their business strategy with appropriate risk management practices and controls.
• Leads the development and implementation of an audit plan and strategy using an appropriate risk-based methodology, including performing and designing assigned audit entity risk assessments to support a forward-looking, strategically aligned audit plan.
• Additionally, trains the team on the use of audit workpapers.
• Determines appropriate audit cycles, necessary resources, and estimated expenses associated with the completion of the forward-looking 12 – 18-month audit plan.
• Presents sections of Audit Plan to senior leadership and the Board Audit Committee for approval.
• Monitor advancement of assigned audit engagements, in contrast, to plan and make essential adjustments.
• Assess the adequacy of management’s action plans for addressing and correcting audit findings and issues.
• Monitor through regular follow-up, the progress of management action plans.
• Oversee the IA Department technology and IT vendor management activities.
• Lead with soliciting/analyzing proposals and negotiating third party audit engagements.
• Designs process improvements and standardization of audit processes, methodologies, and guidelines.
• Evaluate current audit approaches and practices and provide thought leadership on industry best practices to drive maturation and evolution of the Audit Department.
• Work with the audit team to ensure consistency and compliance with both internal and professional standards.
• Represents the audit division at quarterly Board Audit Committee meetings.
• Prepares and presents audit reports/results, audit plan status, and corrective action plan updates to the Audit Committee.
• Manages ongoing assessments of the changing risk profile including closely interfacing with management to ensure understanding and controls to ensure it is effective, collaborative, and inclusive.
• Conducts financial, operational, and compliance audits, which includes, but is not limited to planning, fieldwork, and report writing phases of the audit.
• Effectively identify control gaps, analyze underlying root causes, and communicate to management ensuring effective action plans have been identified.
• Recruits and develops team members needed to meet department objectives and strategy.
• Manages, coaches, and mentors audit team members with focus on career development and succession.
• Contributes to development of monthly/quarterly Audit Committee package.

Minimum Qualifications:

Education:

Education: Bachelor’s Information Technology, Computer Science, Accounting or Business from an accredited university is required. Masters Accounting, business or related degree preferred.

Licensure:

Licensure: Certifications: Certified Information Systems Auditor (CISA) required. Additional certifications such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Internal Auditor (CIA) or Certified Public Accountant (CPA) preferred. Certified Financial Services Auditor (CFSA) and Certified Risk Professional (CRP) are other certifications that are desirable.

Experience:

Experience: Ten years of experience as an information technology internal auditor managing audit engagements in a financial institution or a related organization. Senior level audit management experience. Seven to Ten years of supervisory/ managerial experience. Proficiency in IT COBIT, NIST Cybersecurity Framework (CFS), Information Security Management, in-depth knowledge of internal audit standards, procedures and techniques required for performing engagements and best practices.

Knowledge, Skills, and Abilities:

Strong proficiency in IT audit methodologies, IT risk management, cybersecurity, and regulatory requirements for financial institutions. Exceptional analytical, problem-solving, and decision-making abilities. Strong system data analytic knowledge and proficiency. Strong ability to present complex IT issues to non-technical stakeholders. Strong in using audit workpaper management tools and IT audit frameworks. Strong interpersonal, leadership, and communication (both written and oral) skills. Ability to engage and influence senior executives, establish and maintain collaborative partnerships, and provide thought leadership to strategic decisions. Excellent planning and operational deployment skills; ability to translate vision, strategy, and business requirements into clear actionable goals. Strong strategic and process thinking abilities; takes a broad perspective and makes connections. Proactively looks for opportunities, solutions, and process improvements. Manages projects, milestones and tasks, resources, and risks/dependencies. Ability to drive change, establish priorities, and integrate work in a fast-paced environment, and achieve results. Demonstrate strong technical expertise, leadership skills, and strategic thinking to enhance IT audit function. Ability to work as a leader or participant of large, cross-functional teams or as an individual contributor. Unquestionable business and personal integrity and values congruent with those of the organization. Results-oriented with the ability to direct or manage multiple projects simultaneously.

Physical Demands and Work Environment:

(The physical demands and work environment characteristics described herein are representative of those that must be met by an employee to successfully perform essential functions of this position and/or may be encountered while performing essential functions. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.) While performing the essential duties of this position, an employee would frequently be required to stand, walk, and sit. Specific vision abilities required by this position include close vision, distance vision, and the ability to adjust focus. The noise level in the work environment is usually moderate. Our company offers a dynamic hybrid work arrangement, which requires three days of on-site work, in the Sugar Land, TX office. Ability to travel occasionally, up to 20%.

Disclaimer:

The above statements are intended to describe the general nature and level of work being performed by people assigned to this job. They are not intended to be an exhaustive list of all responsibilities, duties, and skills required of personnel so classified. Texas Dow Employees Credit Union is an equal opportunity employer, dedicated to a policy of non-discrimination in employment on any basis including race, color, age, protected veteran status, sex, religion, disability, genetic information, national origin, or other status protected by federal, state or local law. Consistent with the American Disabilities Act, applicants may request accommodations needed to participate in the application process.

Founded in 1955, TDECU formed when a group of Dow employees pitched in $5 each to loan a friend $35 to buy a refrigerator. That initial mission of people helping people continues today. Over the last 65 years, we have grown to meet the needs of the communities we serve and share TDECU's passion for service and great value in our products. Our first merger took us west to the Victoria area, where we made many new friends and Members. We have since become an integral part of the community. In the East Market, where we began, we opened our field of membership to serve all Brazoria County residents. Today, TDECU has 39 service locations, including 35 Member Centers. The original $35 loan has turned into over $4 billion in assets today that continue to improve our 348,000 Members' lives by helping them get what they need to achieve their financial needs and dreams.

Transparency in Coverage Link This link leads to the machine readable files that are made available in response to the federal Transparency in Coverage Rule and includes negotiated service rates and out-of-network allowed amounts between health plans and healthcare providers. The machine-readable files are formatted to allow researchers, regulators, and application developers to more easily access and analyze data.