Senior Lead Auditor

KeyBank; Kentucky; Hybrid; USD 71,000 - 125,000; Full time

Job summary

KeyBank's Internal Audit, Enterprise Projects team, seeks a Senior Lead Auditor to oversee risk-based reviews of complex programs and projects across their lifecycle. You will assess governance, design and effectiveness of controls, and communicate findings to senior management.

The role requires strong audit/risk management skills, knowledge of technology-enabled transformations, data governance, cybersecurity, and AI-related technology.

Qualifications

• Bachelor's Degree or equivalent experience required.
• Minimum of 3 years of audit, risk management or related experience.
• Relevant certifications preferred (CPA, CIA, CISA, CSPO, CSM, PMP, CRISC).

Responsibilities

• Lead and execute all phases of project risk reviews.
• Conduct walkthroughs and testing procedures for governance and controls.
• Review project status reporting, risk registers and KPIs.
• Identify and communicate project risks and regulatory issues.
• Draft audit findings and executive summaries for senior management.
• Escalate concerns and monitor remediation through completion.
• Coordinate integrated reviews across multiple audit teams.
• Perform testing to ensure compliance with standards and policies.
• Evaluate risks in technology-enabled transformation initiatives.
• Demonstrate respect and accountability, including DEI considerations.

Skills

Audit

Risk management

Tech risk

Project management

Data governance

Cybersecurity

AI/Gen AI

Stakeholder communication

Mentor staff

Education

Bachelor's Degree

Job description

Location: For Those Who Work At Home, Ohio

Job Summary

KeyBank's Internal Audit (IA) serves as the 3rd Line of Defense and provides independent assurance over the effectiveness of governance, risk management, and internal controls across the organization. The Enterprise Projects (EP) team evaluates and monitors the bank's most critical strategic initiatives, including large-scale business transformations, technology implementations, regulatory programs, digital modernization efforts, data-driven initiatives, and emerging technology deployments.

The Senior Lead Auditor will lead and execute independent risk-based reviews of complex programs and projects throughout their lifecycle. This role is responsible for assessing project governance, identifying emerging risks, evaluating the design and effectiveness of business and technology controls, and communicating observations and recommendations to senior management.

The ideal candidate possesses strong audit and risk management capabilities combined with an understanding of technology-enabled transformations, system development practices, data governance, cybersecurity concepts, and emerging technologies such as Artificial Intelligence (AI) and Generative AI. The role requires collaboration with business, technology, risk, compliance, and audit stakeholders to provide independent insight into the successful delivery of strategic initiatives while ensuring risks are appropriately identified, governed, and mitigated.

The Senior Lead Auditor will lead complex reviews, coordinate cross-functional audit teams, mentor staff, identify opportunities for continuous improvement, and contribute to the evolution of Internal Audit's project and technology risk oversight capabilities.

The Risk Review Group has career path planning and supports professional growth by supporting the pursuit of relevant certifications.

Responsibilities

• Lead and execute all phases of project risk reviews, including planning, fieldwork, reporting, and issue validation activities.
• Conduct walkthroughs, and testing procedures to evaluate the effectiveness of governance, risk management, and internal controls.
• Review project status reporting, governance artifacts, risk registers, issue logs, and key performance indicators to assess overall project health.
• Identify, assess, and communicate project risks, control weaknesses, implementation concerns, and regulatory compliance issues.
• Draft audit findings, observations, executive summaries, and reporting deliverables for senior management and audit leadership.
• Escalate significant concerns to project leadership and monitor remediation efforts through completion.
• Coordinate integrated reviews involving multiple audit teams and subject matter experts across risk domains.
• Perform testing to evaluate adherence to enterprise project management standards, governance frameworks, policies, and regulatory requirements.
• Evaluate risks and controls associated with technology-enabled transformation initiatives, and emerging technologies.
• Demonstrate the ability to perform in an organizational culture of respect and personal accountability regarding Diversity, Equity and Inclusion.

Education Qualifications

• Bachelor's Degree or equivalent experience required.

Experience Qualifications

• Minimum of 3 years of audit, risk management, technology risk, project management, or related experience.

Licenses and Certifications(preferred)

• Certified Public Accountant (CPA)
• Certified Internal Auditor (CIA)
• Certified Information Systems Auditor (CISA)
• Certified Scrum Product Owner (CSPO)
• Certified Scrum Master (CSM)
• Project Management Professional (PMP)
• Certified in Risk and Information Systems Control (CRISC)

This position is NOT eligible for employment visa sponsorship for non-U.S. citizens.

COMPENSATION AND BENEFITS

This position is eligible to earn a base salary in the range of $71,000.00 - $125,000.00 annually. Placement within the pay range may differ based upon various factors, including but not limited to skills, experience and geographic location. Compensation for this role also includes eligibility for incentive compensation which may include production, commission, and/or discretionary incentives.

Key has implemented an approach to employee workspaces which prioritizes in-office presence, while providing flexible options in circumstances where roles can be performed effectively in a mobile environment.

KeyCorp is an Equal Opportunity Employer committed to sustaining an inclusive culture. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, genetic information, pregnancy, disability, veteran status or any other characteristic protected by law.

Qualified individuals with disabilities or disabled veterans who are unable or limited in their ability to apply on this site may request reasonable accommodations by emailing [e-mail].