IT Audit Manager

Woodforest; The Woodlands (TX); On-site; USD 120,000 - 150,000; Full time

Job summary

Woodforest National Bank seeks an IT Audit Manager to lead medium to complex audits of the technology environment, including infrastructure, cloud, security, and data governance. You will partner with technology leadership while maintaining independence and delivering strategic insights on controls and regulatory expectations.

With a focus on advancing audit methodologies, data analytics, and continuous auditing, you will drive risk assessment, testing, and reporting, collaborating across teams

Qualifications

• 6+ years’ IT auditing or IT role with exposure to internal controls and risk assessment.
• 2+ years leading complex IT projects or IT audits.
• Banking or financial services experience preferred.
• Ability to read/write queries; programming knowledge is a plus.
• Strong background in cyber security, information security, cloud or infrastructure.

Responsibilities

• Plan, execute, and document medium to complex IT audits from start to finish.
• Conduct risk assessments, define scope, testing plans, and report findings.
• Review workpapers and contribute to the annual IT audit plan.
• Represent Internal Audit on IT projects and guide technical matters.
• Assist with risk assessments and annual audit scheduling.

Skills

Auditing standards

Internal control frameworks

Communication skills

Critical thinking

Risk assessment

Project management

Interpersonal skills

Problem solving

Leadership

Education

Bachelor’s Degree in Information Systems or Computer Science

CISA or CISSP certification preferred

Job description

About this job

Take the next step toward your new career today!

Become a part of the diverse and inclusive team within our nationally recognized award‑winning Bank that is one of the strongest in the nation. Woodforest National Bank is privately owned, and our Employee Stock Ownership Plan is the largest shareholder. We focus on building relationships and discovering opportunities to better serve our communities and understand the financial needs of every customer we serve. At Woodforest we care and prove it by volunteering with local charities and foodbanks to give back to the communities we serve. By joining Woodforest you will become a part of one of the largest employee‑owned banks in the country!

The IT Audit Manager serves as a technical subject matter expert within Internal Audit and is responsible for developing, planning, and executing medium to complex risk‑based audits. The audits primarily focus on the organization’s technology environment, including infrastructure, network architecture, cloud computing, information security, cybersecurity, data governance, IT operations, and emerging technology risks. This role partners closely with technology leadership while maintaining independence, providing strategic insight regarding control effectiveness, regulatory expectations, emerging threats, and industry best practices. In addition, the IT Audit Manager supports advancement of the Internal Audit function through the development of technical audit methodologies, risk assessments, data analytics capabilities, and continuous auditing solutions.

Key Responsibilities:

• Completes medium to complex IT process or application audits from beginning to end with limited guidance. This would include conducting walkthroughs, creating the audit risk assessment and scope; developing, executing, and documenting the audit testing plan; discussing results with Management, drafting audit reports, and tracking audit issues to completion.
• Assists with reviewing workpapers and driving the completion of the annual IT audit plan.
• Represents Internal Audit on various IT projects and initiatives, including the participation in risk assessments.
• Serves as a department resource for questions and guidance on technical matters; extracts and provides data to auditors for analysis.
• Participates and assists with the annual risk assessment and development of annual audit schedule

Competencies Required:

• Strong working knowledge of auditing standards and internal control frameworks.
• Excellent written and verbal communication, interviewing, and presentation skills.
• Inquisitive, critical thinker with business risk awareness, professional skepticism, and sound judgment.
• Ability to effectively interact with and respond to common inquiries from executive management, regulatory agencies, and/or outside consultants.
• Extensive knowledge of IT practices, vulnerability assessment, change control, business continuity, data privacy and risk assessment practices.
• Exposure to a variety of IT areas such as operating systems, databases, platforms, network hardware and software, security tools, cloud services, data mining tools, and common software/applications.
• Stays abreast of emerging technologies and trends within the IT and cybersecurity landscapes and learns new skills quickly.
• Strong project management and organization skills with high attention to detail.
• Ability to research, assimilate information, apply strong problem solving and analytical skills, and influence issue resolution.
• Ability to manage multiple responsibilities and projects in a fast‑paced environment with competing priorities and deadlines.
• Strong leadership and interpersonal skills; ability to work cooperatively and collaboratively with all levels of employees with skills to build consensus across diverse teams and achieve results through the effort of others.

Minimum Qualifications/Experience:

• 6+ years’ experience in IT auditing or an information technology role with demonstrated exposure to internal controls and/or risk assessment practices required.
• 2+ years’ experience in leading complex IT projects or IT audits.
• Must be able to easily learn how to manage medium-to-complex IT process or application audits from beginning to end with limited guidance.
• Banking or financial services industry experience preferred.
• Ability to read or write queries and other working knowledge of programming tools are preferred.
• Strong technical background in cyber security, information security, cloud engineering or infrastructure preferred.

Formal Education & Certification:

• Bachelor’s Degree in Information Systems, Computer Science, or related field preferred.
• Industry recognized certification such as Certified Information Systems Auditor (CISA) or Certified Information Systems Security Professional (CISSP) preferred.

Work Status:

• Full‑Time.

Supervisory Responsibility:

• Varies, depending on the audit.

Travel:

• Less than 5% travel expected.

Working Conditions:

• Conditions involve lifting no more than ten pounds, sitting most of the time, but may involve walking, moving, or standing for brief periods, and occasionally lifting and carrying articles like files, ledgers, folders, etc.

Disclaimer:

This job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee. Nothing herein restricts management’s right to assign or reassign duties and responsibilities to this job at any time.

Woodforest is an Equal Opportunity Employer, including Disability and Veterans.