Senior IT Auditor: Cyber, Cloud & Risk Steward

Federal Reserve System; Chicago (IL); On-site; USD 96,000 - 114,000; Full time

Benefits offered by this job

Medical, dental, vision, Rx

401k, retirement plan

Paid time off, transit benefit

Onsite gym, subsidized cafeteria

Job summary

Federal Reserve Bank of Chicago is seeking a Senior IT Auditor to join the Audit Team. You will conduct technical audits across cloud, cybersecurity, and DevSecOps, translating technical risks into business insights and providing practical remediation guidance.

The role requires a bachelor’s degree in a related field, 1+ year of experience, and relevant certifications (CISA/CIA/CPA). A range of professional certifications including CRISC, CISM, CIA is recommended.

Qualifications

• Bachelor’s degree in computer science, information management, IT, IS, cybersecurity or commensurate training/experience.
• Minimum one year of work experience.
• Professional certification such as CISA, CIA, or CPA (in progress acceptable).
• CRISC, CISM, CIA, Cloud, AI, or SAFe certifications recommended.

Responsibilities

• Conducts moderately complex IT audit fieldwork per IIA standards with documentation.
• Tests IT controls across systems and processes; identifies gaps and supports risk assessments.
• Identifies IT and cybersecurity risks; recommends mitigations.
• Performs follow-up reviews to verify remediation effectiveness and produces closure documentation.
• Acts as IT Audit Liaison between audit teams and business stakeholders.
• Evaluates IT projects for control effectiveness and governance.
• Monitors IT risk indicators and produces trend analyses.

Skills

IT audit

risk assessment

control testing

communication

auditing standards

Education

Bachelor’s degree or equivalent

Tools

IIA/NIST frameworks

Job description

Federal Reserve Bank of Chicago is seeking a Senior IT Auditor to join the Audit Team. You will conduct technical audits across cloud, cybersecurity, and DevSecOps, translating technical risks into business insights and providing practical remediation guidance.

The role requires a bachelor’s degree in a related field, 1+ year of experience, and relevant certifications (CISA/CIA/CPA). A range of professional certifications including CRISC, CISM, CIA is recommended.