IT Staff Auditor (Hybrid)

Dollar Bank, FSB; Pittsburgh (Allegheny County); On-site; USD 60,000 - 80,000; Full time

Job summary

Dollar Bank, FSB is seeking an IT Staff Auditor to enhance the Internal Audit function. The role involves assessing IT controls, collaborating with teams, and providing actionable recommendations. Candidates should hold a relevant bachelor's degree and possess strong communication and analytical skills.

Experience in IT audit or related fields is preferred, along with certifications like CISA or CPA. Essential functions include supporting audits, identifying risks, and leveraging data analytics. Join Dollar Bank to foster a robust risk culture in a collaborative environment.

Qualifications

• 1+ years experience in IT audit, IT risk, Cybersecurity, or a related field is preferred.
• Professional Certification in relevant fields is desirable.
• Knowledge of IT frameworks such as NIST, COBIT or similar.

Responsibilities

• Support the execution of the Internal Audit plan.
• Assist in identification and documentation of IT risks and controls.
• Execute audit testing procedures in accordance with standards.

Skills

Strong oral and written communication skills

Attention to detail

Project management

Analytical skills

Proficiency in Microsoft Office

Education

Bachelor's degree in cybersecurity, management information systems, computer science, accounting, finance, or related field

Job description

The IT Staff Auditor is a key contributor to the effectiveness and continuous improvement of Dollar Bank's Internal Audit function. This role requires a growth mindset and a strong commitment to professional development, as well as the advancement of the Bank's risk management and control environment.

Under the direction of the Associate IT Audit Director, the IT Staff Auditor supports the execution of information technology (IT) audits and advisory engagements. This role evaluates the design and operating effectiveness of IT controls across key domains, including governance, risk management, access controls, change management, computer and system operations, and contributes to the identification of control gaps and areas for enhancement.

The IT Staff Auditor collaborates with audit team members and business partners to deliver high-quality audit outcomes, leveraging data-driven insights and sound professional judgment. Responsibilities include performing testing procedures, documenting results in accordance with Internal Audit standards, and assisting in the development of clear, actionable recommendations that strengthen control effectiveness and align with regulatory expectations.

Through this work, the IT Staff Auditor helps promote a strong risk culture, supports compliance with applicable regulations, and contributes to the overall resilience and operational integrity of the Bank's IT environment.

Required Qualifications:

• A bachelor's degree in cybersecurity, management information systems, computer science, accounting, finance, or a related field. Equivalent experience in IT audit or risk is acceptable.
• Strong oral and written communication skills.
• Proficiency in the use of a computer and Microsoft Office (i.e., Word, Excel, PowerPoint, SharePoint, and Outlook) is required.
• Attention to detail and critical‑thinking skills.
• Project management and analytical skills.

Preferred Qualifications:

• At least one year experience in IT audit, IT risk, Cybersecurity, or a related field.
• Professional Certification such as Certified Information System Auditor – CISA, Certified Internal Audit – CIA, Certified Public Accountant – CPA or Certified Information Systems Security Professional – CISSP.
• Knowledge of Federal Financial Institutions Examination Council's (FFIEC) IT Handbook and related guidelines.
• Knowledge of IT frameworks such as NIST, COBIT or similar.
• Knowledge of Standards issued by non‑governmental organization such as Information Systems Audit and Control Association (ISACA) and Institute of Internal Auditors (IIA).

Essential Functions:

• Support the execution of the Internal Audit plan by performing assurance or special project audits including but not limited to Sarbanes‑Oxley (SOX) Section 404 IT General Controls (ITGC), Cybersecurity, Software Development Lifecycle, Business Continuity and Disaster recovery, Access and Change Management.
• Assist in the identification, assessment, and documentation of IT risks and controls across key domains and proactively identify opportunities for control enhancements, process efficiencies, and cost optimization.
• Execute audit testing procedures in accordance with department standards and professional auditing guidance (e.g., FFIEC, IIA Standards, ISACA frameworks), ensuring workpapers are complete, accurate, and clearly articulate the procedures performed, evidence obtained, exceptions identified, and conclusions reached.
• Perform walkthroughs of IT processes and controls to develop an understanding of control design and to validate operational effectiveness, including inquiry, inspection of evidence, observation, and re‑performance techniques.
• Identify control deficiencies and assist in evaluating their severity, root cause, and potential impact to the Bank, including risks related to financial reporting, regulatory compliance, operational effectiveness, and information security.
• Collaborate effectively with audit team members and stakeholders to ensure timely delivery of audit objectives, including providing regular status updates, escalating issues as appropriate, and contributing to a high‑performance team environment.
• Leverage data analytics and audit tools, where applicable, to enhance testing efficiency, improve coverage, and identify risk indicators or anomalies within audit scopes.
• Participate in ongoing professional development activities, including training, certifications, and knowledge sharing, to build technical, analytical, and audit‑related competencies.
• Periodic travel may be required to complete assigned reviews, training, etc.

All employees have the responsibility and the accountability to serve as risk managers for their businesses by understanding, reporting, responding to, managing, and monitoring the risk they encounter daily as required by Dollar Bank's risk management program. Compliance with regulatory laws and company procedures is a required component of all position descriptions.