IT Controls & Risk Auditor II

Navy Federal Credit Union; Winchester (VA); On-site; USD 85,000 - 120,000; Full time

Job summary

Navy Federal Credit Union's Internal Audit team seeks an IT Auditor II to contribute to pre-implementation reviews, risk-based testing, and advisory engagements across IT and information security. You will collaborate with stakeholders to identify controls and document results.

The role emphasizes data analytics, evidence gathering, and clear communication. A bachelor's degree and at least one year IT audit experience are required, with growth opportunities within a transformational audit

Qualifications

• Minimum one year of IT audit experience.
• Knowledge of IT control concepts and practices and risk-based auditing techniques.
• Working knowledge of IT Risk, General Controls, Information Security Frameworks and best practices.
• Effective skill in managing multiple priorities independently and operate well in a team environment to achieve goals.
• Effective interpersonal and communication skills.
• Effective organizational, planning and time management skills.
• Effective word processing and spreadsheet software skills.
• Effective critical thinking, analytical, and problem-solving skills.
• Bachelor's degree or the equivalent combination of experience, education, and training.

Responsibilities

• Perform pre-implementation reviews of new and changing technology to evaluate whether risks are identified and controls are appropriately designed before go-live
• Contribute toward the execution of other advisory and occasional IT audit engagements in accordance with Navy Federal and industry audit standards
• Assist the Auditor-In-Charge in identifying and assessing technology risks to develop and execute a risk-based audit or advisory work program
• Coordinate with points of contact and first/second lines of defense to conduct preliminary research, participate in and occasionally lead process walkthroughs, document process narratives and workflows, identify key risks and controls, and obtain evidence for testing
• Brainstorm ideas for leveraging data analytics and technology to drive deeper risk coverage and insights to business partners
• Perform IT testing, including IT controls, across multiple engagements concurrently. Apply critical thinking skills by seeking to understand and execute assigned testing and document results according to professional and internal standards
• As part of pre-implementation and advisory engagements, independently review and analyze evidence, requirements, and test results to assess design adequacy, control readiness, and whether the solution meets its intended objectives before go-live
• Evaluate requirements traceability, system integration and data migration testing, and go-live readiness in partnership with project teams
• Identify and summarize potential issues and discuss with the Auditor-In-Charge in a timely manner
• Prepare workpapers to document relevant information obtained, analyzed, and evaluated that support audit observations/issues and conclusions
• Self-manage workload/timelines and report delays and issues to audit management
• Participate in Internal Audit strategic initiatives and act as a champion of change and continuous improvement
• Stay abreast of and ensure compliance with applicable federal, state and industry laws, regulations, and guidelines
• Actively monitor and stay current with evolving industry trends, technology, and emerging risks that may impact the company
• Perform other duties as assigned

Skills

IT audit

IT risk

General Controls

Information Security

Communication skills

Time management

Education

Bachelor's degree

Tools

CAAT techniques

Job description

Navy Federal Credit Union's Internal Audit team seeks an IT Auditor II to contribute to pre-implementation reviews, risk-based testing, and advisory engagements across IT and information security. You will collaborate with stakeholders to identify controls and document results.

The role emphasizes data analytics, evidence gathering, and clear communication. A bachelor's degree and at least one year IT audit experience are required, with growth opportunities within a transformational audit