Senior IT & Security Audit Leader

The Options Clearing Corporation (OCC); Salt Lake City (UT); Hybrid; USD 105,000 - 171,000; Full time

Benefits offered by this job

Hybrid work

Tuition reimbursement

Student loan repayment assistance

Tech stipend

PTO and parental leave

401k match

Health benefits

Job summary

The Options Clearing Corporation (OCC) in Salt Lake City, UT, seeks an IT and security risk auditor to lead independent assessments of the organization’s information technology and security environment. This role involves evaluating management controls, presenting improvement recommendations, and guiding risk-based audits within a fast-paced financial services setting.

You will drive audit quality, manage risk identification, and coordinate with engagement teams while ensuring compliance with

Qualifications

• Bachelor's degree required in IT/CS/Engineering/Accounting/Finance/Business or related field.
• 5+ years of audit-related experience in IT and security audits and projects.
• Experience with IT risk assessment principles and frameworks.

Responsibilities

• Lead and support audits within the annual plan.
• Assess IT and security controls and recommend improvements.
• Evaluate risks and test governance, risk, and compliance processes.
• Coordinate with management and auditees to ensure quality engagement outcomes.

Skills

Clear communication

Problem solving

Analytical thinking

Teamwork

Education

Bachelor's degree in IT/CS/Engineering/Accounting/Finance/Business

Tools

CyberArk

Splunk

SailPoint

ServiceNow

Jira

Confluence

GitHub

Oracle

DB2

SQL

AWS

Workday

Archer

Job description

The Options Clearing Corporation (OCC) in Salt Lake City, UT, seeks an IT and security risk auditor to lead independent assessments of the organization’s information technology and security environment. This role involves evaluating management controls, presenting improvement recommendations, and guiding risk-based audits within a fast-paced financial services setting.

You will drive audit quality, manage risk identification, and coordinate with engagement teams while ensuring compliance with