Senior Auditor

3M HEALTHCARE; Sandy (UT); Hybrid; USD 80,000 - 110,000; Full time

Job summary

Mountain America Credit Union seeks an IT Audit professional to lead and perform audits of IT systems, applications, and cybersecurity processes. You will guide the entire audit lifecycle from planning to reporting and evaluate IT controls against industry frameworks.

The role demands strong analytical thinking, excellent communication, and the ability to work independently while partnering with Risk Management and Compliance teams. Hybrid work is available in Sandy, UT.

Qualifications

• Bachelor’s degree in information systems, CS, Accounting, Cybersecurity, Data Analytics or related field.
• Three years performing end-to-end IT and/or cybersecurity audits.
• One+ year leading IT/cybersecurity end-to-end process and control walkthroughs.
• Certification: Passed at least one of CISA, CPA or CIA exams.

Responsibilities

• Lead and perform audits of IT systems, applications, infrastructure, and cybersecurity processes.
• Execute all phases of the audit lifecycle from planning to reporting.
• Evaluate and align IT control frameworks to audit scope.
• Identify risks and control gaps across IT processes and systems.

Skills

Auditing

Analytical thinking

Communication skills

Independence

Education

Bachelor’s degree in information systems/CS/accounting/cybersecurity/Data Analytics

Master’s degree in information systems/CS/accounting/cybersecurity/Data Analytics (preferred)

Tools

ACL

IDEA

Picalo

Job description

Job Summary

To perform audits and reviews, and to review, test, and assess control environment to help safeguard credit union assets.

Location

Mountain America Center - Hybrid: 9800 S Monroe St Sandy, UT 84070Note: This role is not eligible to be performed in Colorado or Connecticut, either remotely or in-person.

Schedule

This is a Hybrid Schedule- this team is in office 3 days a week (Tuesday, Wednesday, and Thursday) with 2 days remote (Monday and Friday).

Key Responsibilities

• Lead and perform audits of IT systems, applications, infrastructure, and cybersecurity processes.
• Execute all phases of the audit lifecycle, including planning, process walkthrough, risk assessment, fieldwork testing, and reporting.
• Evaluate and align third-party IT control frameworks as inputs to audit scope.
• Identify risks and control gaps across MACU IT processes and systems.
• Contribute to IT audit entity risk assessments and development of the IT audit plan.
• Conduct and lead interviews with key MACU IT personnel to gather required understanding of process and risks for advisory engagements.
• Provide insights into IT and cyber risk exposures, control design, and governance effectiveness.
• Recommend practical, risk-based solutions to improve IT controls, processes, and compliance posture.
• Prepare clear, concise audit documentation including work papers, findings, and audit reports.
• Prepare and communicate audit engagement status and observations to management and stakeholders.
• Track and validate remediation efforts to ensure timely resolution of audit findings.
• Contribute to continuous improvement of audit methodologies, tools, and data analytics capabilities.
• Stay current with emerging technologies, cybersecurity risks, and regulatory expectations.
• Support adoption of audit automation and GRC tools (e.g., Archer or similar platforms, if applicable in your environment).
• Partner with business, IT, Risk Management, and Compliance teams to enhance alignment across the Three Lines model.
• Serve as a trusted advisor while maintaining auditor independence and objectivity.
• Provide guidance and mentorship to Staff Auditors and interns.
• Review audit workpapers and ensure quality and adherence to standards.
• Assist managers in audit planning and stakeholder engagement.
• Maintain and develop competencies aligned with internal audit standards and professional development expectations.
• Uphold independence, objectivity, and ethical standards in all audit activities.

Minimum Qualifications

• Education: Bachelor’s degree in information systems, Computer Science, Accounting, Cybersecurity, Data Analytics or a related field.
• Experience: Three years performing end-to-end IT and/or cybersecurity audits.
• Experience: One or more years of experience leading IT and cybersecurity end-to-end process and control walkthroughs.
• Certification: Passed at least one of the following CISA, CPA or CIA exams.

Preferred Qualifications

• Education: Master’s degree in information systems, Computer Science, Accounting, Cybersecurity, Data Analytics or a related field.
• Experience: Demonstrated understanding of how to apply IT control frameworks (e.g., NIST, COBIT, ISO 27001) in auditing.
• Experience: Demonstrated ability to assess risks, analyze complex systems, and identify control weaknesses.
• Experience: Strong written and verbal communication skills, with the ability to present to management with confidence.
• Experience: Demonstrated application of analytical thinking and synthesis of disparate information.
• Experience: Demonstrated ability to work autonomously and execute more than one audit engagement simultaneously.
• Certification: Achieved at least one of the following CISA, CPA or CIA certifications.

Managerial Responsibility

None

Computer/Office Equipment Skills

• Advanced level skill for Microsoft Office (Outlook, Word, PowerPoint, Excel), especially Excel.
• Knowledge of computer assisted audit techniques preferred.
• Experience with data analysis software such as ACL, IDEA, and/or Picalo preferred.

Language Skills

• Demonstrated ability to clearly communicate verbally and in writing.
• Demonstrated ability to read and follow instructions.

Other Skills and Abilities

• Ability to perform ad hoc data analysis in conjunction with audits, as necessary.
• Understanding of financial institution operations and transactions.
• Ability to communicate effectively and courteously.
• Ability to understand regulations.
• Understanding of the credit union data system and ability to use a computer and software applications.
• Ability to recognize and analyze problems, improprieties, and opportunities for improvement.

Physical Abilities / Working Conditions

• Physical Demands: Ability to sit, talk and hear consistently; Ability to stand, walk, and use hands to handle or reach occasionally; Ability to lift up to 25 pounds occasionally, may need to lift up to 50 pounds.
• Environmental: Typical office with moderate noise.

EEO Statement

Mountain America Credit Union is an EEO/AA/ADA/Veterans employer.