Director, Technology Auditor, Technology Infrastructure

BNY Mellon; New York (NY); On-site; USD 150,000 - 190,000; Full time

Job summary

BNY Mellon seeks a Director to lead IT audit across Technology Infrastructure within Internal Audit. The role is based in New York, NY or Lake Mary, FL, and will define risk assessments, the annual audit plan, and audit scope while overseeing audits to meet professional standards.

The successful candidate will manage a global team, collaborate with senior stakeholders, and strengthen control frameworks across applications, governance, architecture, networks, data management, and lifecycle

Qualifications

• 8+ years of IT auditing and cybersecurity experience.
• Proven experience conducting IT audits.
• Strong knowledge of IT systems, networks, and information systems management.
• Certifications such as CISA, CISSP, or CISM desirable.
• Excellent analytical and communication skills.

Responsibilities

• Define annual auditable entity risk assessments and the audit plan.
• Set audit scope and testing; oversee audit execution per standards.
• Identify risk-based gaps in technology systems and processes.
• Lead discussions with management and ensure remedial actions.
• Manage staff performance and development; mentor junior auditors.
• Maintain relationships with key technology staff to stay current.
• Engage in ongoing training on audit, technology, and regulations.
• Prioritize project workflows and resolve issues with analysis.

Skills

Cyber security

IT audit

Risk management

Stakeholder leadership

Team leadership

Education

Bachelor's degree in computer science or information technology

Master's degree preferred

Job description

We’re seeking a future team member for the role of Director to join our Technology Infrastructure organization within Internal Audit. This role is located in New York, NY or Lake Mary, FL.

• Execute annual auditable entity risk assessments.
• Define the annual audit plan.
• Set individual audit scope and testing.
• Oversee successful execution of audits, in line with audit department methodology and professional standards.
• Identifying risk-based gaps in the firm's technology systems and processes
• Lead issue discussions with management and obtain appropriate remedial actions.
• Manage the performance and development of staff and the achievement of staff goals and objectives.
• Maintaining relationships with key technology staff to stay abreast of new developments or control breakdowns.
• Engage in relevant training regarding audit, businesses, financial controls, regulations, or a particular specialty and actively seek to apply this knowledge in the role and pass it on to the wider audit team.
• Prioritizing project workflows.
• Investigating unexpected situations, providing thoughtful analysis and resolution

To be successful in this role, we are seeking the following:

• An inquisitive individual with an in-depth understanding of processes, risks, controls, tools, and techniques in cyber security areas including:
  • Application Technology
  • Technology Governance
  • Technology Architecture
  • Network Engineering
  • Availability and Capacity Management
  • Technology Risk Management
  • Data and Information Management
  • Technology Asset Management
  • System Development Lifecycle
  • Identity and Access Management
• Ability to manage global projects on time and within budget.
• Experience with managing and motivating a global team.
• Ability to collaborate with members of another audit team.

Qualifications:

• Bachelor's degree in computer science, Information Technology, or a related field (Master's degree preferred).
• Minimum of 8+ years of experience in IT auditing and cybersecurity.
• Proven experience in conducting IT Audits.
• Strong technical knowledge of IT systems, networks, and Information Systems management.
• Professional certifications such as CISA, CISSP, or CISM are highly desirable.
• Excellent analytical and critical thinking skills.
• Effective communication and interpersonal skills.

Ability to lead a team and manage senior stakeholders across the firm