IT Internal Auditor II: Controls & Risk Analytics

QCR Holdings, Inc.; Davenport (IA); Hybrid; USD 72,000 - 88,000; Full time

Benefits offered by this job

Health, Dental, Vision

Life Insurance

Disability Insurance

401K

Paid Time Off

Paid Holidays

Employee Stock Purchase Plan

HSA/FSA

Voluntary Supplemental Insurance

Job summary

QCR Holdings, Inc. is seeking an IT Internal Auditor II to perform IT audits, SOX IT-related control testing, and technology risk assessments across the company and its subsidiaries.

You will evaluate IT general controls, application controls, cybersecurity controls, and related processes to ensure risks are managed and controls comply with regulatory and policy expectations. You will collaborate with audit management, business partners, and IT personnel to execute the annual audit plan,

Qualifications

• Bachelor’s degree in MIS, CIS, Cybersecurity, CS, Accounting, Business or related field.
• At least 2 years of IT internal audit, information security, risk management, or related experience.
• Working knowledge of data analytics tools and techniques (SQL, Power BI, Alteryx) preferred.
• Familiarity with FFIEC guidance, COBIT, NIST CSF and banking regulatory expectations preferred.
• Hold a certification such as CISA, CIA, CISSP, CRISC, or CPA.
• Strong analytical, interpersonal, organization, and problem-solving skills.
• Willingness for minimal travel to QCRH locations as needed.

Responsibilities

• Perform IT audits and SOX IT-related control testing per the approved audit plan.
• Evaluate IT general controls including access, change management, backup/recovery, information security, cloud, and IT operations controls.
• Assess automated and application controls supporting key financial/operational processes.
• Conduct interviews and walkthroughs to understand systems, risks, and controls.
• Prepare audit workpapers and draft reports; track remediation of issues.
• Document audit findings and develop practical recommendations to strengthen controls.

Skills

Data analytics

Analytical skills

Interpersonal skills

Organizational skills

Education

Bachelor’s degree in MIS / related field

Tools

SQL

Power BI

Alteryx

Job description

QCR Holdings, Inc. is seeking an IT Internal Auditor II to perform IT audits, SOX IT-related control testing, and technology risk assessments across the company and its subsidiaries.

You will evaluate IT general controls, application controls, cybersecurity controls, and related processes to ensure risks are managed and controls comply with regulatory and policy expectations. You will collaborate with audit management, business partners, and IT personnel to execute the annual audit plan,