Technical IT Audit Lead

LE001 Northwest Bank; Kentucky; On-site; USD 100,000 - 120,000; Full time

Job summary

Northwest Bank seeks a Technical IT Audit Lead to perform specialized auditing of bank technology operations, including cloud, cybersecurity, and data governance. You will plan, test, report, and follow up on audit results with autonomy and professional judgement.

This role requires collaboration with audit teams, strong regulatory awareness, and the ability to communicate findings to management. The position is based in office locations listed of the Northwest region.

Qualifications

• Bachelor's Degree in Computer Science, Information Security, Information Systems, or IT.
• CISA, CISSP, CISM or related certification preferred.
• 5-6 years IT Audit, Information Security, Governance-Risk-Compliance experience required.

Responsibilities

• Lead IT-related audits with audit teams and execute them.
• Lead planning to identify risks and develop risk-based procedures.
• Prepare audit reports with concise observations and corrective actions.

Skills

Audit planning

Data analysis

Independent judgement

Team collaboration

Education

Bachelor's Degree Computer Science, Information Security, Information Systems, or IT

Certifications: CISA, CISSP, CISM or related

Tools

Active Directory

Linux

Azure

ServiceNow

Jira

iSeries Midrange

Job description

IN0534 Fishers, NY0705 NY Region Business Office, OH0523 Independence Bus Office, OH0713 NW Bancshares HQ, PA0258 Bellevue

Job Description The Technical IT Audit Lead performs specialized auditing tasks related to bank technology operations. This includes thorough and efficient planning, testing, reporting, and follow-up on audit results. The role is primarily engaged with audits of technical and emerging technology disciplines, such as cloud computing, cybersecurity, network security, application security, digital implementation, data governance and security. This position is guided by general instruction and a limited amount of supervision, and the candidate demonstrates a high level of autonomy and ability to exercise independent judgement.

Essential Functions

• Work collaboratively with audit teams to lead and execute IT-related audits.
• Lead planning activities to identify significant risks, determine audit scope, and develop appropriate risk-based audit procedures.
• Be familiar with Northwest documentation/processes/procedures, and research/interpret relevance of specific regulations/current literature to audit work.
• Consult key personnel to assess business processes and the strength of their control environments.
• Collect and analyze necessary data for audits, evaluate information, and draw logical conclusions.
• Lead activities to prepare clear, detailed audit documentation evidencing the results of actual testing procedures in accordance with departmental standards and the Institute of Internal Auditors (IIA).
• Identify meaningful value-added recommendations for management to improve the adequacy, effectiveness, and efficiency of controls and related processes.
• Summarize and present audit results/findings to business unit management and audit management.
• Lead meetings involving various levels of management to effectively communicate audit status, align on significant audit issues, and recommend corrective actions.
• Prepare audit reports, including clearly written, concise audit observations that effectively communicate identified issues and their related corrective actions to stakeholders.
• Evaluate the quality of the corrective action taken to improve deficient conditions.
• Meet departmental continuing education requirements.
• Ensure compliance with Northwest’s policies and procedures, and Federal/State regulations.
• Navigate Microsoft Office Software, computer applications, and software specific to the department in order to maximize technology tools and gain efficiency.
• Work as part of a team.

Qualifications

• Bachelor's Degree Computer Science, Information Security, Information Systems, or IT
• CISA, CISSP, CISM or other related certification preferred
• 5 - 6 years IT Audit, Information Security, Technology Governance-Risk-Compliance-related experience required
• 6 - 8 years Financial Services/Banking-related experience preferred
• Candidate must possess extensive knowledge of and be fluent in the review of, but not limited to, regulatory exam reports, compliance reports, third party risk associated with various business units
• Broad knowledge of financial services technology standards and frameworks (e.g., FFIEC IT Handbooks, NIST CSF, CSA Cloud Controls Matrix, PCI DSS) with the ability to interpret regulatory requirements and determine how to effectively assess business processes for compliance with applicable regulations
• Solid knowledge of key technologies (e.g., Active Directory, Linux, iSeries Midrange, Azure, ServiceNow, Jira etc.).

Pay and Benefits

The pay range for this position is generally $100,000-$120,000 per year. Actual pay is based on various factors including but not limited to the successful candidate’s experience, skills, and knowledge.

• Additional bonus earning opportunities and benefits are also available.

Northwest is an equal opportunity employer. We are committed to creating an inclusive environment for all employees. At Northwest, we’re here for what's next. Whether we're finding opportunities for families, businesses and communities or opening doors for our team, we share a passion for helping the people around us succeed. And we know that in order to provide the highest level of care, we need to understand unique experiences and perspectives. That's why, whether you're interested in a corporate role or something customer-facing, your talent and voice matter. Here, you belong. Working at Northwest, you'll find that we recognize our employees for the important work they do through competitive compensation and benefits, professional development opportunities and by regularly celebrating wins along the way. So, take a look at the opportunities here. And join us as we move into the future making a difference for the people we serve.