Technical IT Audit Lead

Northwest Bank; Bellevue (Allegheny County); On-site; USD 100,000 - 120,000; Full time

Job summary

Northwest Bank is seeking a Technical IT Audit Lead to perform specialized auditing tasks related to bank technology operations, including planning, testing, reporting and follow-up on audit results. The role focuses on audits of cloud, cybersecurity, network and application security, digital implementation, data governance and security, with a high degree of autonomy and the ability to exercise independent judgement.

Collaboration and communication with management are essential.

Qualifications

• Bachelor's Degree in Computer Science, Information Security, Information Systems, or IT.
• CISA, CISSP, CISM or related certification preferred.
• 5–6 years IT Audit and information security experience.
• 6–8 years Financial Services/Banking experience preferred.
• Broad knowledge of FFIEC IT Handbooks, NIST CSF, PCI DSS and related standards.

Responsibilities

• Work collaboratively with audit teams to lead and execute IT-related audits.
• Lead planning activities to identify significant risks, determine audit scope, and develop risk-based audit procedures.
• Research Northwest documentation and regulations to audit work.
• Consult key personnel to assess business processes and control environments.
• Collect and analyze data, evaluate information, and draw conclusions.
• Prepare audit documentation evidencing results of testing procedures.
• Identify recommendations for improving controls and processes.
• Summarize and present audit results to management and audit leadership.
• Lead meetings to communicate audit status and corrective actions.
• Prepare concise audit observations and action plans for stakeholders.
• Evaluate corrective actions and ensure regulatory compliance.
• Meet continuing education requirements and adhere to policies and regulations.

Education

Bachelor's Degree in Computer Science, Information Security, Information Systems, or IT

Tools

Active Delivery

Linux

iSeries Midrange

Azure

ServiceNow

Jira

Job description

IN0534 Fishers, NY0705 NY Region Business Office, OH0523 Independence Bus Office, OH0713 NW Bancshares HQ, PA0258 Bellevue

Job Description

The Technical IT Audit Lead performs specialized auditing tasks related to bank technology operations. This includes thorough and efficient planning, testing, reporting, and follow-up on audit results. The role is primarily engaged with audits of technical and emerging technology disciplines, such as cloud computing, cybersecurity, network security, application security, digital implementation, data governance and security. This position is guided by general instruction and a limited amount of supervision, and the candidate demonstrates a high level of autonomy and ability to exercise independent judgement.

Essential Functions

• Work collaboratively with audit teams to lead and execute IT-related audits.


• Lead planning activities to identify significant risks, determine audit scope, and develop appropriate risk-based audit procedures.


• Be familiar with Northwest documentation/processes/procedures, and research/interpret relevance of specific regulations/current literature to audit work.


• Consult key personnel to assess business processes and the strength of their control environments.


• Collect and analyze necessary data for audits, evaluate information, and draw logical conclusions.


• Lead activities to prepare clear, detailed audit documentation evidencing the results of actual testing procedures in accordance with departmental standards and the Institute of Internal Auditors (IIA).


• Identify meaningful value-added recommendations for management to improve the adequacy, effectiveness, and efficiency of controls and related processes.


• Summarize and present audit results/findings to business unit management and audit management.


• Lead meetings involving various levels of management to effectively communicate audit status, align on significant audit issues, and recommend corrective actions.


• Prepare audit reports, including clearly written, concise audit observations that effectively communicate identified issues and their related corrective actions to stakeholders.


• Evaluate the quality of the corrective action taken to improve deficient conditions.


• Meet departmental continuing education requirements.


• Ensure compliance with Northwest’s policies and procedures, and Federal/State regulations.


• Navigate Microsoft Office Software, computer applications, and software specific to the department in order to maximize technology tools and gain efficiency.


• Work as part of a team.

Qualifications

• Bachelor's Degree Computer Science, Information Security, Information Systems, or IT


• CISA, CISSP, CISM Or Other Related Certification preferred


• 5 - 6 years IT Audit, Information Security, Technology Governance-Risk-Compliance-related experience required


• 6 - 8 years Financial Services/Banking-related experience preferred


• Candidate must possess extensive knowledge of and be fluent in the review of, but not limited to regulatory exam reports, compliance reports, third party risk associated with various business units


• Broad knowledge of financial services technology standards and frameworks (e.g., FFIEC IT Handbooks, NIST CSF, CSA Cloud Controls Matrix, PCI DSS) with the ability to interpret regulatory requirements and determine how to effectively assess business processes for compliance with applicable regulations


• Solid knowledge of key technologies (e.g., Active Delivery, Linux, iSeries Midrange, Azure, ServiceNow, Jira etc.).

The pay range for this position is generally $100,000-$120,000 per year. Actual pay is based on various factors including but not limited to the successful candidate’s experience, skills, and knowledge. Additional bonus earning opportunities and benefits are also available.

Northwest is an equal opportunity employer. We are committed to creating an inclusive environment for all employees.