IT Internal Auditor II

QCR Holdings, Inc.; Davenport (IA); On-site; USD 72,000 - 88,000; Full time

Benefits offered by this job

Health Insurance

Dental Insurance

Vision Insurance

Life Insurance

Disability Insurance

401K

PTO

Paid Holidays

Employee Stock Purchase Plan

Voluntary Insurance

Job summary

QCR Holdings, Inc. is seeking an IT Internal Auditor II to perform IT audits, SOX control testing, and technology risk assessments across the organization.

You will evaluate IT general controls, application controls, cybersecurity controls, and related processes to ensure regulatory and internal standards are met. Collaborating with audit management, business partners, and IT personnel, you will contribute to the annual audit plan, uphold confidentiality, and help strengthen controls while

Qualifications

• Bachelor’s degree in MIS, CIS, Cybersecurity, Accounting, Business, or related field.
• Minimum 2 years of IT internal audit, information security, risk management, public accounting, or related disciplines.
• Experience with data analytics tools such as SQL, Power BI, Alteryx.

Responsibilities

• Perform IT audits and SOX IT-related control testing per audit plan.
• Evaluate ITGCs including access controls, change management, and operations.
• Assess automated and application controls for financial and operational processes.
• Document audit findings and develop recommendations.
• Prepare audit workpapers and reports for management review.
• Track remediation of identified audit issues.

Skills

SQL

Power BI

Alteryx

Education

Bachelor’s degree in MIS/CIS/Cybersecurity/Accounting/Business

Job description

Job Type

Full-time

TITLE: IT Internal Auditor II

DEPARTMENT: 996 – GO Internal Audit/Loan Review/Compliance Audit

Job Summary

The IT Internal Auditor II is responsible for performing information technology audits, IT-related Sarbanes-Oxley (SOX) internal control testing, and technology risk assessments for QCR Holdings, Inc. and its subsidiaries. This position evaluates the design and operating effectiveness of IT general controls, application controls, cybersecurity controls, and technology processes to determine whether risks are appropriately managed and controls comply with regulatory, policy, and industry expectations. The IT Auditor collaborates with audit management, business partners, and IT personnel to execute the annual audit plan. This role builds strong relationships, engages stakeholders with professionalism and respect, contributes to a positive, high-performing audit culture, and demonstrates behaviors that foster trust, teamwork, and organizational success.

Essential Functions

• Perform IT audits, SOX IT-related control testing and procedural reviews in accordance with the approved audit plan.


• Evaluate IT general controls including logical access, privileged access, change management, system development, backup and recovery, information security, cloud, and IT operations controls.


• Assess automated and application controls supporting critical financial and operational processes.


• Conduct interviews and walkthroughs to obtain an understanding of systems, risks, and control activities.


• Assist in maintaining audit analytics methodologies, scripts, dashboards, and documentation to support consistency and quality across engagements.


• Prepare audit workpapers that support conclusions and recommendations.


• Document audit findings and develop practical recommendations to strengthen controls and mitigate risk.


• Prepare written draft audit reports to management detailing audit results for audit management’s review.


• Track and validate remediation of identified audit issues.


• Expand technical and compliance knowledge of all subsidiaries’ departments through training programs, seminars, employee interaction, and publications. Continuously develop and expand internal audit skills as well as develop best practices.


• As directed by Audit Management, assist with reviewing other internal auditors’ work/completion of audit steps along with providing constructive feedback/review comments. Verify the auditor cleared comments accordingly and ensure draft report is ready for Senior Auditor/Manager’s review.


• Maintain confidentiality and safeguard sensitive information.


• Maintain professional competence through continuing education and certifications.


• Comply with all company or regulatory policies, procedures and requirements that are applicable to the position.


• Foster and preserve a culture of diversity, equity, and inclusion.


• Additional duties and responsibilities may be required to support the company’s mission, vision and values.

Qualifications

• Bachelor’s degree in Management Information Systems, Computer Information Systems, Cybersecurity, Computer Science, Accounting, Business, or related field.


• A minimum of 2 years of years of experience in IT internal audit, information security, risk management, public accounting, technology compliance, or related disciplines preferred.


• Working knowledge of data analytics tools and techniques, including SQL, Power BI, Alteryx, or similar technologies.


• Ability to extract, transform, analyze, and interpret data from multiple systems and databases.


• Knowledge of IT general controls, application controls, information security principles, SOX compliance, and technology risk management.


• Familiarity with FFIEC guidance, COBIT, NIST Cybersecurity Framework, and banking regulatory expectations preferred.


• Hold a certification such as CISA, CIA, CISSP, CRISC, or CPA.


• Strong analytical, interpersonal, organization, and problem-solving skills.


• Minimal travel to all QCRH company locations, as needed.

Salary & Benefits

The minimum salary range for this position is $80,000 annually. The actual starting salary will be based on qualifications and business needs and may vary, as permitted by applicable state law.

This position is a regular full-time position individuals employed as regular full-time are eligible for the following benefits subject to the terms, limitations and conditions of each benefit plan: Health, Dental, Vision, Life Insurance, Disability Insurance, FSA, HSA, 401K, Employee Stock Purchase Plan, Paid Time Off, Paid Holidays and additional Voluntary Supplemental Insurance.

At QCR Holdings, Inc. we are committed to fostering and preserving a culture of diversity, equity, and inclusion and strongly believe that it's our differences - of all kinds - that make our company and our communities better and stronger.

QCR Holdings, Inc. is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, disability, age, sexual orientation, gender identity, national origin, veteran status, or other protected class status.

It is the policy of QCR Holdings, Inc. to comply with the Americans with Disabilities Act by providing reasonable accommodations to enable qualified individuals with disabilities to access the job application and interview process, to perform the essential functions of the job, and to receive equal access to other benefits and privileges of employment.