Senior Associate, Technology Audit

Sallie Mae; Newark (DE); Hybrid; USD 90,000 - 120,000; Full time

Benefits offered by this job

Bonus incentives

Generous PTO

401k match

Medical benefits

Hybrid work

Parental leave

Tuition reimbursement

Job summary

Sallie Mae is seeking a Senior Associate, Technology Audit to plan and execute technology-focused audits, assess IT controls, and strengthen the overall IT governance framework. You will evaluate cybersecurity, data controls, and emerging tech risks while delivering actionable recommendations.

Join a team that partners with leadership to drive risk‑aware decision making, quality assurance, and continuous improvement across our technology landscape. Hybrid work options support work‑life balance.

Qualifications

• Proficient in evaluating and testing IT general controls, application controls, and cybersecurity controls.
• Experience in assessing emerging technology risks (cloud, AI, blockchain).
• Familiarity with auditing data analytics and automated controls is advantageous.
• Solid knowledge of industry regulations and standards (SOX, GDPR, ISO 27001).
• Excellent analytical and problem‑solving skills with ability to identify control deficiencies and propose practical solutions.
• Strong project management abilities, including prioritizing tasks and managing multiple assignments.

Responsibilities

• Conduct technology audits, including IT general controls, application controls, SDLC, cybersecurity, and related areas.
• Assess IT processes, systems, and controls to identify risks and recommended remedial actions.
• Evaluate IT governance, risk management, and internal control processes.
• Identify control deficiencies and provide practical recommendations to enhance IT controls.
• Conduct post‑audit follow‑up to verify implementation and effectiveness of actions.
• Prepare clear audit reports summarizing findings, recommendations, and management responses.

Skills

IT general controls

Cybersecurity controls

Data analytics for audits

Emerging tech risk assessment

SOX/regulatory knowledge

Education

Bachelor's in information technology or computer science

Master's degree or certifications (CISA, CISSP) a plus

Job description

When you join Sallie Mae, you become a champion for all students.

We’re on a mission to power confidence as students begin their unique journey. To help them plan their higher education, successfully finish, and prepare for life after school. To help them Start smart. Learn big.

Students need guidance navigating this important time in their life. They need someone who acknowledges that their education path is unique. They need a partner willing to evolve and not only meet but surpass their expectations. We’re changing. Because students need a better way.

We’re looking for people who are excited to drive this transformation. To break barriers and think of new ways to adapt, help, and create better experiences for students—and for each other.

This is where diverse backgrounds, beliefs, and perspectives matter. It’s where you’re empowered to bring your authentic self to work.

Feeling your best allows you to do your best. Our benefits take care of the whole you—from physical and mental to financial and professional. You’ll get opportunities to further your education and career, support for you and your family (including your pets!), paid time off to volunteer for the things that matter to you, and more.

We’re obsessed with impact and making a real difference. For us, that means putting relationships first, asking “why not?” when tackling challenges, and continuously learning new skills.

Come do more than join something, change something. For students, for future generations, for the future of education.

What You’ll Contribute

The Senior Associate, Technology Audit will be responsible for planning and executing technology-focused audits, evaluating the efficiency and effectiveness of IT controls, and assessing the overall IT governance framework.

What You’ll Do

• Conduct comprehensive technology audits, including IT general controls, application controls, system development life cycle, cybersecurity, and other related areas.
• Assess IT processes, systems, and controls to identify risks, evaluate their impact, and recommend appropriate remedial actions.
• Evaluate the effectiveness of IT governance, risk management, and internal control processes.
• Identify control deficiencies and areas for improvement, and provide practical and actionable recommendations to enhance IT controls and processes.
• Conduct post-audit follow-up to verify the implementation and effectiveness of recommended actions.
• Prepare clear and concise audit reports, summarizing findings, recommendations, and management responses.

The above information is intended to describe the general nature and level of work performed by employees assigned to this job; it is not designed to contain or be interpreted as a comprehensive inventory of all duties, responsibilities and qualifications required of employees in this role.

What You Have

Minimum: Indicate minimum education, skills and experience required.

• Proficient in evaluating and testing IT general controls, application controls, and cybersecurity controls.
• Experience in assessing emerging technology risks, such as cloud computing, artificial intelligence, and blockchain.
• Familiarity with auditing data analytics and automated controls is advantageous.
• Solid knowledge of industry regulations and standards (e.g., SOX, GDPR, ISO 27001).
• Excellent analytical and problem‑solving skills, with the ability to identify control deficiencies and propose practical solutions.
• Strong project management abilities, including the ability to prioritize tasks, meet deadlines, and manage multiple assignments simultaneously.

Preferred

Indicate “nice to haves” regarding education, skills, and experience.

• Bachelor’s degree in information technology, computer science, or a related field. A master’s degree or professional certifications (e.g., CISA, CISSP) are a plus.
• 3+ years of relevant experience in technology audit, IT risk management, or a related field.

The Americans With Disabilities Act

The Americans with Disabilities Act of 1990 (ADA) prohibits discrimination by employers, in compensation and employment opportunities, against qualified individuals with disabilities who, with or without reasonable accommodation, can perform the “essential functions” of a job. A function may be essential for any of several reasons, including: the job exists to perform that function, the employee holding the job was hired for his/her expertise in performing that function, or only a limited number of employees are available to perform that function.

Feeling Your Best Helps You Do Your Best

• Competitive base salaries
• Bonus incentives
• Generous PTO, Floating Holidays and 12 Federal Holidays observed
• Support for financial‑well‑being and retirement 401k with employer match
• Comprehensive medical, dental, vision, hospital indemnity, critical illness, pet insurance and more
• Employer paid short‑term/long‑term disability and basic life insurance
• Flexible hybrid working arrangements.
• Paid parental leave and adoption reimbursement programs
• Free access to on‑site staffed fitness centers (in Delaware) and gym subsidy (for locations outside Delaware)
• Confidential counseling support (EAP), Health Advocacy services and Wellness program with financial incentives
• Tuition Reimbursement and Family Scholarship Programs
• Career development and training opportunities

Sallie Mae is proud to be an equal opportunity (EEO) employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, gender, sexual orientation, national origin, age, genetic information, gender identity, disability, Veteran status or any other characteristic protected by federal, state or local law.

Reasonable accommodations are available for applicants with disabilities in all phases of the application and employment process. To request an accommodation please call [phone] and choose option 9. All information you provide will be kept confidential and will be used only to the extent required to provide needed reasonable accommodations.