Senior Technology Auditor

Mountain America Credit Union; Idaho Falls (ID); Hybrid; USD 75,000 - 95,000; Full time

Job summary

Mountain America Credit Union seeks an experienced IT Audit professional to perform audits of IT systems and cybersecurity processes. The role involves leading all phases of the audit lifecycle, including planning, fieldwork testing, and preparing reports.

The ideal candidate should have a Bachelor's degree in a related field, with 3 years experience in cybersecurity audits and strong communication skills. This position offers a hybrid work schedule based between in-office and remote work.

Qualifications

• Three years performing end-to-end IT and/or cybersecurity audits.
• One or more years of experience leading IT and cybersecurity process walkthroughs.
• Passed at least one of the following certifications: CISA, CPA, or CIA.

Responsibilities

• Lead and perform audits of IT systems and cybersecurity processes.
• Conduct and lead interviews with key IT personnel.
• Provide insights into IT and cyber risk exposures.

Skills

End-to-end IT and cybersecurity audits

Analytical thinking

Strong written and verbal communication skills

Ability to perform ad hoc data analysis

Education

Bachelor's degree in information systems, Computer Science, Accounting, Cybersecurity, Data Analytics or a related field

Master's degree preferred

Tools

Microsoft Office Suite (Excel, Outlook, Word, PowerPoint)

Job description

Job Summary

To perform audits and reviews, and to review, test, and assess control environment to help safeguard credit union assets.

Location

Mountain America Center - Hybrid: 9800 S Monroe St Sandy, UT 84070

Schedule

Hybrid Schedule – this team is in office 3 days a week (Tuesday, Wednesday, and Thursday) with 2 days remote (Monday and Friday).

Key Responsibilities

• Lead and perform audits of IT systems, applications, infrastructure, and cybersecurity processes.
• Execute all phases of the audit lifecycle, including planning, process walkthrough, risk assessment, fieldwork testing, and reporting.
• Evaluate and align third‑party IT control frameworks as inputs to audit scope.
• Identify risks and control gaps across MACU IT processes and systems.
• Contribute to IT audit entity risk assessments and development of the IT audit plan.
• Conduct and lead interviews with key MACU IT personnel to gather required understanding of process and risks for advisory engagements.
• Provide insights into IT and cyber risk exposures, control design, and governance effectiveness.
• Recommend practical, risk‑based solutions to improve IT controls, processes, and compliance posture.
• Prepare clear, concise audit documentation including work papers, findings, and audit reports.
• Prepare and communicate audit engagement status and observations to management and stakeholders.
• Track and validate remediation efforts to ensure timely resolution of audit findings.
• Contribute to continuous improvement of audit methodologies, tools, and data analytics capabilities.
• Stay current with emerging technologies, cybersecurity risks, and regulatory expectations.
• Support adoption of audit automation and GRC tools (e.g., Archer or similar platforms, if applicable in your environment).
• Partner with business, IT, Risk Management, and Compliance teams to enhance alignment across the Three Lines model.
• Serve as a trusted advisor while maintaining auditor independence and objectivity.
• Provide guidance and mentorship to staff auditors and interns.
• Review audit workpapers and ensure quality and adherence to standards.
• Assist managers in audit planning and stakeholder engagement.
• Maintain and develop competencies aligned with internal audit standards and professional development expectations.
• Uphold independence, objectivity, and ethical standards in all audit activities.

Minimum Qualifications

• Bachelor’s degree in information systems, Computer Science, Accounting, Cybersecurity, Data Analytics or a related field.
• Three years performing end‑to‑end IT and/or cybersecurity audits.
• One or more years of experience leading IT and cybersecurity end‑to‑end process and control walkthroughs.
• Passed at least one of the following certifications: CISA, CPA, or CIA exams.

Preferred Qualifications

• Master’s degree in information systems, Computer Science, Accounting, Cybersecurity, Data Analytics or a related field.
• Demonstrated understanding of how to apply IT control frameworks (e.g., NIST, COBIT, ISO27001) in auditing.
• Demonstrated ability to assess risks, analyze complex systems, and identify control weaknesses.
• Strong written and verbal communication skills, with the ability to present to management with confidence.
• Demonstrated application of analytical thinking and synthesis of disparate information.
• Demonstrated ability to work autonomously and execute more than one audit engagement simultaneously.
• Achieved at least one of the following certifications: CISA, CPA, or CIA.

Managerial Responsibility: None

Computer/Office Equipment Skills: Advanced level skill for Microsoft Office (Outlook, Word, PowerPoint, Excel), especially Excel.

Knowledge of computer‑assisted audit techniques: Preferred.

Language Skills: Demonstrated ability to clearly communicate verbally and in writing; ability to read and follow instructions.

Other Skills and Abilities

• Ability to perform ad hoc data analysis in conjunction with audits, as necessary.
• Understanding of financial institution operations and transactions.
• Ability to communicate effectively and courteously.
• Ability to understand regulations.
• Understanding of the credit union data system and ability to use a computer and software applications.
• Ability to recognize and analyze problems, improprieties, and opportunities for improvement.

Physical Abilities / Working Conditions

• Ability to sit, talk and hear consistently.
• Ability to stand, walk, and use hands to handle or reach occasionally.
• Vision Requirements: Close vision (clear vision at 20 inches or less); Distance vision (clear vision at 20 feet or more).
• Weight lifted or force exerted: Ability to lift up to 25 pounds occasionally; may need to lift up to 50 pounds.
• Environmental: No unusual environmental factors (typical office). Noise environment: moderate noise (business office with computers and printers, light traffic).

This job is not eligible to be performed in Colorado or Connecticut, either remotely or in-person.

Mountain America Credit Union is an EEO/AA/ADA/Veterans employer.