Technical IT Audit Lead

Northwest Bank; Buffalo (NY); On-site; USD 100,000 - 120,000; Full time

Job summary

Northwest Bank is seeking an IT Audit Lead to perform specialized audits of bank technology operations, including cloud, cybersecurity, and data governance. You will plan, test, report, and follow up on findings with a resilient, risk-based approach.

The role requires strong collaboration with audit teams, effective communication with management, and the ability to work autonomously in a regulated banking environment. Join a team focused on strengthening controls and technology governance.

Qualifications

• Bachelor's Degree in Computer Science/Information Security/Information Systems or IT.
• CISA, CISSP, CISM or other related certification preferred.
• 5-6 years IT Audit/InfoSec experience required.
• 6-8 years Financial Services/Banking experience preferred.
• Knowledge of regulatory exam reports, compliance reports, and third-party risk.
• Broad knowledge of IT standards/frameworks (FFIEC, NIST CSF, PCI DSS) for compliance.

Responsibilities

• Lead and execute IT-related audits with audit teams.
• Plan audits to identify risks, determine scope and procedures.
• Research regulations and interpret relevance to audit work.
• Consult personnel to assess control environments.
• Collect/analyze data; draw logical conclusions.
• Prepare audit documentation per IIA standards.
• Present findings to management and stakeholders.
• Lead meetings to discuss audit status and corrective actions.
• Prepare clear audit observations and recommendations.
• Evaluate effectiveness of implemented corrective actions.
• Meet continuing education requirements.
• Ensure compliance with policies and regulations.
• Navigate MS Office and department-specific tools; work in a team.

Skills

Auditing

Regulatory understanding

Communication

Teamwork

Education

Bachelor's Degree in Computer Science/Information Systems/IT

Tools

Active Directory

Linux

iSeries Midrange

Azure

ServiceNow

Jira

Job description

IN0534 Fishers, NY0705 NY Region Business Office, OH0523 Independence Bus Office, OH0713 NW Bancshares HQ, PA0258 Bellevue

Job Description

The Technical IT Audit Lead performs specialized auditing tasks related to bank technology operations. This includes thorough and efficient planning, testing, reporting, and follow-up on audit results. The role is primarily engaged with audits of technical and emerging technology disciplines, such as cloud computing, cybersecurity, network security, application security, digital implementation, data governance and security. This position is guided by general instruction and a limited amount of supervision, and the candidate demonstrates a high level of autonomy and ability to exercise independent judgement.

Essential Functions

• Work collaboratively with audit teams to lead and execute IT-related audits.
• Lead planning activities to identify significant risks, determine audit scope, and develop appropriate risk-based audit procedures.
• Be familiar with Northwest documentation/processes/procedures, and research/interpret relevance of specific regulations/current literature to audit work.
• Consult key personnel to assess business processes and the strength of their control environments.
• Collect and analyze necessary data for audits, evaluate information, and draw logical conclusions.
• Lead activities to prepare clear, detailed audit documentation evidencing the results of actual testing procedures in accordance with departmental standards and the Institute of Internal Auditors (IIA).
• Identify meaningful value-added recommendations for management to improve the adequacy, effectiveness, and efficiency of controls and related processes.
• Summarize and present audit results/findings to business unit management and audit management.
• Lead meetings involving various levels of management to effectively communicate audit status, align on significant audit issues, and recommend corrective actions.
• Prepare audit reports, including clearly written, concise audit observations that effectively communicate identified issues and their related corrective actions to stakeholders.
• Evaluate the quality of the corrective action taken to improve deficient conditions.
• Meet departmental continuing education requirements.
• Ensure compliance with Northwest's policies and procedures, and Federal/State regulations
• Navigate Microsoft Office Software, computer applications, and software specific to the department in order to maximize technology tools and gain efficiency
• Work as part of a team

Qualifications

• Bachelor's Degree Computer Science, Information Security, Information Systems, or IT
• CISA, CISSP, CISM Or Other Related Certification preferred
• 5 - 6 years IT Audit, Information Security, Technology Governance-Risk-Compliance-related experience required
• 6 - 8 years Financial Services/Banking-related experience preferred
• Candidate must possess extensive knowledge of and be fluent in the review of, but not limited to regulatory exam reports, compliance reports, third party risk associated with various business units
• Broad knowledge of financial services technology standards and frameworks (e.g., FFIEC IT Handbooks, NIST CSF, CSA Cloud Controls Matrix, PCI DSS) with the ability to interpret regulatory requirements and determine how to effectively assess business processes for compliance with applicable regulations
• Solid knowledge of key technologies (e.g., Active Directory, Linux, iSeries Midrange, Azure, ServiceNow, Jira etc.).

The pay range for this position is generally $100,000-$120,000 per year. Actual pay is based on various factors including but not limited to the successful candidate's experience, skills, and knowledge. Additional bonus earning opportunities and benefits are also available.

Northwest is an equal opportunity employer. We are committed to creating an inclusive environment for all employees.