Manager, IT Audit

Navy Federal's Internal Audit team is in the midst of an exciting transformational journey to become a best-in-class Audit function! It is our vision to be a preferred advisor to the business by building and cultivating trust through the consistent execution of high-quality and risk-focused audit and advisory work. We’re focused on implementing efficient processes, maximizing our use of technology, integrating data analytics into everything we do, and investing in our biggest asset, our people. If this sounds like the type of team you’d like to be a part of, then we want to learn more about you!

To plan, direct and manage the Internal Audit (IA) Information Technology (IT) Audit Program; staff; lead and conduct complex IT, information security and continuous audits; and provide technical IT expertise to team members while supporting wide-ranging IA initiatives. Facilitate and support IT audit and examination activities of external auditors and NCUA examiners. Oversee IA programming and data extraction efforts and advise Operational Audits that have an IT impact. Ensure compliance with federal and state regulations and established internal policies and procedures. Administer Internal Audit systems and applications.

This position is eligible for the TalentQuest employee referral program. If an employee referred you for this job, please apply using the system-generated link that was sent to you.

• Lead, oversee and conduct the most complex IT and information security audits to ensure accordance with Navy Federal and industry audit standards
• Lead consulting engagements in performing vulnerability assessments and penetration testing to IT infrastructure
• Manage third party consultants; including preparing requirements, RFPs, vendor selection, SOW, rules of engagement and coordinating with Information Security and Information Services
• Plan annual Information Technology and Information Security audits for the organization based on business needs and by assessing emerging risk, including cloud and vendor services, new technology and projects
• Align division plans with corporate level plans to ensure seamless and integrated approach to implementation of findings
• Ensure the auditor-in-charge defines expectations (controls analysis) for each audit project including audit objectives, initial planning activities, key contacts, and scope of project
• Oversee progress of IT audit projects and intercede as needed when difficulties/roadblocks are encountered
• Review and evaluate audit reports to ensure that findings and recommendations are reasonable, effective and prepared in accordance with Internal Audit Standards
• Obtain post-audit feedback from senior management to ensure findings are appropriately addressed and resolved within the timeframes requested
• Manage the closure of remediated IT findings
• Consult with key strategic partners to achieve goals and facilitate team building, issue escalation, and consensus to further IT audit objectives Page 2 of 3
• Develop programs, databases, and systems for IA improved efficiency and use, including implementation of continuous auditing techniques
• Identify changes in regulatory practices and keep informed of industry and environmental trends related to IA issues and communicate information to senior management and staff
• Consult on projects related to the development and improvement of systems, products and procedures and provide advice on structure, controls and solutions when requested.
• Drive change management and process improvement efforts through collaboration and analysis of department objectives
• Represent the department, acting on behalf of department leadership, as liaison and spokesperson to Navy Federal committees, other Departments and senior management regarding all areas of IT and Information Security, including periodic presentations and report updates to Supervisory Committee
• Manage the development of data extracts to support external auditors, year-end financial audits, Member confirmation notices, and support requests of employee activity for Human Resources and Security
• Ensure external auditors and examiners are satisfied with audit procedures and audit findings
• Manage Internal Audit staff to include responding to Computer Assisted Audit Techniques, administration and programming of Auto Audit system and Internal Audit databases
• Lead audit system upgrade projects, working with IT technical and vendor resources
• Perform other duties as assigned

• Extensive experience in IT and Information Security Risk Management and Internal Controls concepts and practices
• Extensive experience as Auditor-in-Charge of complex, IT and integrated audits
• Extensive knowledge of IT/operational analysis which includes expertise in analyzing effectiveness a