Senior IT Audit Lead - Cloud, Security & Compliance

Northwest Bank; Bellevue (Allegheny County); On-site; USD 100,000 - 120,000; Full time

Benefits offered by this job

Bonus opportunities

Job summary

Northwest Bank is seeking a Technical IT Audit Lead to plan and execute audits of bank technology operations, including cloud and cybersecurity, data governance, and security controls. The role requires strong independent judgement and collaboration with audit teams to deliver risk-based findings.

Responsibilities include planning, testing, documenting results per IIA standards, communicating issues to management, and driving corrective actions while ensuring regulatory compliance.

Qualifications

• Bachelor's Degree in Computer Science, Information Security, Information Systems, or IT.
• CISA, CISSP, CISM or other related certification preferred.
• 5-6 years IT Audit, Information Security, or Technology Governance-Risk-Compliance experience.
• Broad knowledge of FFIEC IT Handbooks, NIST CSF, CSA Cloud Controls Matrix, PCI DSS.

Responsibilities

• Lead and execute IT-related audits with the audit team.
• Plan audits to identify risks and develop risk-based procedures.
• Prepare audit documents and present findings to management.
• Recommend corrective actions to improve controls and efficiency.
• Maintain compliance with IIA standards and Northwest policies.

Skills

Audit leadership

Regulatory compliance

Communication

Education

Bachelors in Computer Science / Information Security / Information Systems / IT

CISA, CISSP, CISM or related certification

Tools

Active Directory

Linux

iSeries Midrange

Azure

ServiceNow

Jira

Job description

Northwest Bank is seeking a Technical IT Audit Lead to plan and execute audits of bank technology operations, including cloud and cybersecurity, data governance, and security controls. The role requires strong independent judgement and collaboration with audit teams to deliver risk-based findings.

Responsibilities include planning, testing, documenting results per IIA standards, communicating issues to management, and driving corrective actions while ensuring regulatory compliance.