IT Audit Manager

Northern Trust; Chicago (IL); On-site; USD 80,000 - 130,000; Full time

Job summary

Join a forward-thinking financial institution as an IT Audit Manager, where your expertise in IT auditing and cybersecurity will be pivotal in leading audit projects. This role offers a unique opportunity to work with a collaborative team, ensuring the integrity of information technology and data security. With a balanced hybrid working model, you will enjoy the flexibility of working both in the office and from home. Be part of an organization that values innovation and community service, where your contributions will have a meaningful impact on our clients and the industry. If you're a self-motivated leader with a passion for technology and auditing, this is the perfect opportunity for you to grow your career.

Benefits

Flexible working hours

Collaborative work culture

Career development opportunities

Community service involvement

Qualifications

• 5+ years of IT auditing and systems experience required.
• Knowledge of audit procedures and technical security standards essential.

Responsibilities

• Lead audit project teams and communicate results to management.
• Identify technology and cyber risks and controls within processes.

Skills

IT auditing

team leadership

information security

cybersecurity controls

communication skills

organizational skills

problem-solving

flexibility

Education

Bachelor's degree

CISA certification

CISSP certification

Tools

UNIX

Windows

AWS

MS Azure

Word

Excel

Job description

About Northern Trust:

Northern Trust, a Fortune 500 company, is a globally recognized, award-winning financial institution that has been in continuous operation since 1889.

Northern Trust is proud to provide innovative financial services and guidance to the world’s most successful individuals, families, and institutions by remaining true to our enduring principles of service, expertise, and integrity. With more than 130 years of financial experience and over 22,000 partners, we serve the world’s most sophisticated clients using leading technology and exceptional service.

Role/ Department: IT Audit Manager/Internal Audit

The IT Audit Manager is responsible for conducting and documenting audits throughout the Corporation. This role leads audit project teams, which includes providing oversight to the audit team and communicating results of the engagement to management. The IT Audit Manager provides technical information security expertise and training to auditors within the engagement audit team and works closely with Sr IT Audit Managers to confirm the scope of the audit and to devise an appropriate testing approach to be performed during the engagement.

Specific to this role, the IT Audit Manager is also responsible for leading validation efforts for enhanced and newly implemented controls for information technology, data and cyber security under the bank's transformation projects.

The key responsibilities of the role include:

1. Leadership and Management
   • Establishes and develops strong working relationships and open communication with key stakeholders
   • Provides training, coaching, and auditing expertise to the audit team
   • Accountable for own assignments and holding others accountable for theirs including proactively managing expectations
2. Audit Methodology
   • Identify technology and cyber risk and controls within processes
   • Lead internal audit projects related to IT controls, information security / cyber, pre/post system implementation, IT governance, and operational areas; drive consistency of methodology
   • Assists with the development of the audit budget and/or timeframe for how the audit will be completed based on the objective and risk of the areas covered within the engagement
   • Finalizes planning documents and conducts first level review of planning documents as required
   • Coordinates with other audit teams (business unit, regional, and specialist) to ensure evaluations of related areas occur timely and cover key areas within the audit
   • Demonstrates professional skepticism and comfort with questioning how certain processes are being performed in order to facilitate making improvements
   • Reviews the work papers of the audit team members ensuring that departmental standards have been met
   • Communicates the audit status to business unit stakeholders and Audit Services management
   • Drafts findings and recommendations for the purpose of status updates, memos, and audit reports
   • Maintain technical competence by ongoing training, seeking development opportunities and applying new knowledge to daily work assignments

Skills/Qualifications:

1. Minimum of 5 years of IT auditing and systems experience
2. Experience leading teams
3. Knowledge of audit procedures and technical security and control standards usually obtained through related work experience and a four year degree program is required to perform system audits
4. Solid understanding of Information Technology and Cybersecurity controls
5. Skills as needed to perform testing of design and operational effectiveness of application controls (e.g., Interface and Application Security Controls)
6. Skills as needed to perform testing of design and operational effectiveness of information security and cyber security controls (e.g., Penetration Testing, SecOps, Security Information and Event Monitoring, Data Security)
7. Knowledge of the operations, functions, and objectives of interfacing areas is required to properly audit operations, services, systems, workflow, and operational impact on other areas
8. Operates independently; has in-depth knowledge of business unit/function
9. Self-starter with an ability to self-motivate
10. Excellent verbal and written communication skills
11. Strong organizational skills with attention to detail
12. Ability to proactively assess issues, identify solutions and problem solve
13. Ability to react and respond on a timely basis; work under pressure and to deliver to tight deadlines
14. Ability to adapt and react positively in a changing and dynamic work environment
15. Ability to develop relationships with diverse groups and various levels of technology and non-technology personnel
16. Flexibility, multi-tasking, creative thinking, good business judgment skills are required to meet strict deadlines and manage other projects.
17. Must be a team player and able to work under pressure during peak periods

The successful candidate will benefit from having:

1. Knowledge of systems software applications and databases common to the mainframe and distributed environments, such as UNIX, iSeries, and Windows
2. Understanding of networks, routers, and firewalls is also a plus
3. Understanding of newer technologies (e.g., Containers, Kubernetes, CI/CD) and cloud infrastructure (e.g., AWS, MS Azure)
4. Certified Information System Audit (CISA) certification is preferred. Additional certifications such as Certified Information Systems Security Professional (CISSP), or other related certifications
5. Proficiency in Word and Excel

Working Model: Hybrid (#LI-Hybrid)
We have a balanced hybrid working model to ensure you get the flexibility you need, and the successful candidate will spend their time between working in the office and working from home.

Working with Us:

As a Northern Trust partner, greater achievements await. You will be part of a flexible and collaborative work culture in an organization where financial strength and stability is an asset that emboldens us to explore new ideas.

Movement within the organization is encouraged, senior leaders are accessible, and you can take pride in working for a company committed to assisting the communities we serve! Join a workplace with a greater purpose.

We’d love to learn more about how your interests and experience could be a fit with one of the world’s most admired and sustainable companies! Build your career with us and apply today. #MadeForGreater

Reasonable accommodation

Northern Trust is committed to working with and providing reasonable accommodations to individuals with disabilities. If you need a reasonable accommodation for any part of the employment process, please email our HR Service Center at [e-mail].

We hope you’re excited about the role and the opportunity to work with us. We value an inclusive workplace and understand flexibility means different things to different people.

Apply today and talk to us about your flexible working requirements and together we can achieve greater.