IT Internal Auditor II – Risk & Controls

Sunflower Bank, N.A.; Cañon City (CO); On-site; USD 65,000 - 85,000; Full time

Job summary

Sunflower Bank, N.A. in Canon City, Colorado is seeking an energetic IT Staff Auditor II to join our Internal Audit team.

This full-time role conducts risk-based IT testing, evaluates control design and operating effectiveness, and documents results across engagements. It requires a Bachelor’s degree and at least five years in IT internal audit within financial services, with preferred certifications such as CISA, CISM, or CRISC.

Qualifications

• Bachelor’s Degree in a relevant field and a minimum of five (5) years of IT internal audit experience within the financial services industry.
• Audit certification such as CISA, CISM, CRISC, CGEIT, CDPSE, etc. is preferred.
• Strong critical thinking, analytical, and problem-solving skills, and common sense
• Strong written and oral Communication skills
• Excellent Interpersonal skills
• Strong project management skills
• Ability to handle multiple tasks simultaneously
• Strong Customer Focus Skills
• Must be able to work flexible hours
• Ability to maintain a high degree of confidentiality and objectivity
• Ability to travel to other locations regularly
• Must be bondable.

Responsibilities

• Execute assigned IT and integrated audit procedures in accordance with the approved audit program, including testing of control design and operating effectiveness.
• Perform risk-based testing over key IT processes, such as access management, change management, IT operations, and data integrity, to evaluate control effectiveness and identify potential control gaps.
• Prepare and maintain audit workpapers that clearly document procedures performed, supporting evidence, testing results, and conclusions in accordance with Internal Audit standards and workpaper requirements.
• Participate in walkthroughs and process discussions with business and IT stakeholders to develop an understanding of systems, processes, and key controls.
• Identify control deficiencies, process weaknesses, or inefficiencies, and assist in developing well-supported audit observations, including root causes and potential risk impacts.
• Communicate audit progress, findings, and potential issues to Internal Audit management in a timely and clear manner.
• Assist in the preparation of audit deliverables, including summaries of testing results, issue documentation, and supporting analysis for audit reports.
• Perform follow-up and validation procedures on management action plans to confirm remediation efforts have been effectively implemented.
• Maintain an understanding of applicable regulatory requirements, industry standards, and internal policies relevant to IT risk and controls.
• Adhere to Internal Audit policies, procedures, and professional standards, maintaining independence, objectivity, and quality in all assignments.
• Prioritize and manage multiple assignments effectively, providing regular status updates and meeting established timelines.
• Support continuous improvement initiatives within the Internal Audit function, including adoption of tools, methodologies, and data analytics techniques where applicable.
• Perform the job in accordance with applicable industry laws and regulations as well as the policies and procedures established by the company.
• Responsible for upholding Fair and Responsible Banking practices and Code of Ethics and Conduct guidelines.
• Understand and participate in the Bank’s Community Reinvestment Act program.
• Perform other duties as assigned.

Skills

Critical thinking

Communication skills

Interpersonal skills

Project management

Travel availability

Education

Bachelor’s degree in IT or related field

Audit certifications (CISA, CISM, CRISC, CGEIT, CDPSE) preferred

Job description

Sunflower Bank, N.A. in Canon City, Colorado is seeking an energetic IT Staff Auditor II to join our Internal Audit team.

This full-time role conducts risk-based IT testing, evaluates control design and operating effectiveness, and documents results across engagements. It requires a Bachelor’s degree and at least five years in IT internal audit within financial services, with preferred certifications such as CISA, CISM, or CRISC.