Technical IT Audit Lead

Northwest Bank; Bellevue (Allegheny County); On-site; USD 100,000 - 120,000; Full time

Benefits offered by this job

Bonus opportunities

Job summary

Northwest Bank is seeking a Technical IT Audit Lead to plan and execute audits of bank technology operations, including cloud and cybersecurity, data governance, and security controls. The role requires strong independent judgement and collaboration with audit teams to deliver risk-based findings.

Responsibilities include planning, testing, documenting results per IIA standards, communicating issues to management, and driving corrective actions while ensuring regulatory compliance.

Qualifications

• Bachelor's Degree in Computer Science, Information Security, Information Systems, or IT.
• CISA, CISSP, CISM or other related certification preferred.
• 5-6 years IT Audit, Information Security, or Technology Governance-Risk-Compliance experience.
• Broad knowledge of FFIEC IT Handbooks, NIST CSF, CSA Cloud Controls Matrix, PCI DSS.

Responsibilities

• Lead and execute IT-related audits with the audit team.
• Plan audits to identify risks and develop risk-based procedures.
• Prepare audit documents and present findings to management.
• Recommend corrective actions to improve controls and efficiency.
• Maintain compliance with IIA standards and Northwest policies.

Skills

Audit leadership

Regulatory compliance

Communication

Education

Bachelors in Computer Science / Information Security / Information Systems / IT

CISA, CISSP, CISM or related certification

Tools

Active Directory

Linux

iSeries Midrange

Azure

ServiceNow

Jira

Job description

IN0534 Fishers, NY0705 NY Region Business Office, OH0523 Independence Bus Office, OH0713 NW Bancshares HQ, PA0258 BellevueJob DescriptionThe Technical IT Audit Lead performs specialized auditing tasks related to bank technology operations. This includes thorough and efficient planning, testing, reporting, and follow-up on audit results. The role is primarily engaged with audits of technical and emerging technology disciplines, such as cloud computing, cybersecurity, network security, application security, digital implementation, data governance and security. This position is guided by general instruction and a limited amount of supervision, and the candidate demonstrates a high level of autonomy and ability to exercise independent judgement.Essential FunctionsWork collaboratively with audit teams to lead and execute IT-related audits.Lead planning activities to identify significant risks, determine audit scope, and develop appropriate risk-based audit procedures.Be familiar with Northwest documentation/processes/procedures, and research/interpret relevance of specific regulations/current literature to audit work.Consult key personnel to assess business processes and the strength of their control environments.Collect and analyze necessary data for audits, evaluate information, and draw logical conclusions.Lead activities to prepare clear, detailed audit documentation evidencing the results of actual testing procedures in accordance with departmental standards and the Institute of Internal Auditors (IIA).Identify meaningful value-added recommendations for management to improve the adequacy, effectiveness, and efficiency of controls and related processes.Summarize and present audit results/findings to business unit management and audit management.Lead meetings involving various levels of management to effectively communicate audit status, align on significant audit issues, and recommend corrective actions.Prepare audit reports, including clearly written, concise audit observations that effectively communicate identified issues and their related corrective actions to stakeholders.Evaluate the quality of the corrective action taken to improve deficient conditions.Meet departmental continuing education requirements.Ensure compliance with Northwest’s policies and procedures, and Federal/State regulationsNavigate Microsoft Office Software, computer applications, and software specific to the department in order to maximize technology tools and gain efficiencyWork as part of a teamQualificationsBachelor's Degree Computer Science, Information Security, Information Systems, or ITCISA, CISSP, CISM Or Other Related Certification preferred5 - 6 years IT Audit, Information Security, Technology Governance-Risk-Compliance-related experience required6 - 8 years Financial Services/Banking-related experience preferredCandidate must possess extensive knowledge of and be fluent in the review of, but not limited to regulatory exam reports, compliance reports, third party risk associated with various business unitsBroad knowledge of financial services technology standards and frameworks (e.g., FFIEC IT Handbooks, NIST CSF, CSA Cloud Controls Matrix, PCI DSS) with the ability to interpret regulatory requirements and determine how to effectively assess business processes for compliance with applicable regulationsSolid knowledge of key technologies (e.g., Active Directory, Linux, iSeries Midrange, Azure, ServiceNow, Jira etc.).The pay range for this position is generally $100,000-$120,000 per year. Actual pay is based on various factors including but not limited to the successful candidate’s experience, skills, and knowledge. Additional bonus earning opportunities and benefits are also available.#LI-MM1Northwest is an equal opportunity employer. We are committed to creating an inclusive environment for all employees.