Senior IT Audit & Controls Specialist

FirstBank; Nashville (TN); On-site; USD 90,000 - 120,000; Full time

Job summary

FirstBank is seeking a Senior IT Internal Auditor to independently execute IT audit engagements, evaluate technology and security controls, and contribute to evidence-based reporting. The role includes non-supervisory guidance to Staff Auditors and collaboration with Internal Audit leadership.

Ideal candidates bring 4+ years in IT audit or related fields, a bachelor’s degree in a relevant discipline, and familiarity with financial services, governance, risk, and compliance expectations.

Qualifications

• 4+ years of audit, information technology, information security, or risk experience relevant to IT audit.
• Certifications such as CISA are preferred; progress toward certifications is encouraged.
• Experience in financial institutions, regulated industries, or technology risk is beneficial.

Responsibilities

• Execute IT audit engagements including information security, IT general controls, application controls, and cyber risk.
• Assess control design and operating effectiveness and document results.
• Provide non-supervisory guidance to Staff Auditors on methodology and testing.
• Prepare workpapers, issue summaries, and draft report content with evidence-based conclusions.
• Support planning activities, risk assessment, and follow-up on corrective actions.
• Maintain confidentiality of bank and customer information and adhere to policy.

Skills

IT general controls

Cybersecurity risk

Information security governance

Data governance

Change management

Vulnerability management

Business continuity

Communication with stakeholders

Education

Bachelor’s degree in information systems / computer science / cybersecurity / data analytics / accounting / finance / business / risk management or related field

Job description

FirstBank is seeking a Senior IT Internal Auditor to independently execute IT audit engagements, evaluate technology and security controls, and contribute to evidence-based reporting. The role includes non-supervisory guidance to Staff Auditors and collaboration with Internal Audit leadership.

Ideal candidates bring 4+ years in IT audit or related fields, a bachelor’s degree in a relevant discipline, and familiarity with financial services, governance, risk, and compliance expectations.