IT Audit Project Manager (Hybrid)

Corporate Audit Services’ (CAS) role as the internal audit department is to assist management in attaining company goals by providing an independent, objective, assurance activity designed to add value and improve the organization's operations. CAS provides objective analyses and constructive recommendations for improvement through independently reviewing and evaluating the effectiveness of risk management, controls, governance, and operations.

As the IT Audit Project Manager, you will perform/oversee the planning, fieldwork, and reporting phases of assigned audits. This role will primarily focus on audits of UMB’s enterprise technology and information security areas. This is a subset of the overall responsibilities which will include multiple initiatives as assigned by CAS leadership. 

This role is hybrid (Tue through Thu on-site) located in downtown Kansas City, MO.

How you’ll spend your time:

• Developing and performing audit activities for the planning, fieldwork, reporting, and wrap-up phases of assigned audits in accordance with established methodology /standards.
• Leading teams of one to three staff auditors in the execution of a risk-based testing approach, including the documentation of business/technology processes and testing of controls to assess design and effectiveness.
• Reviewing audit workpapers and providing coaching and feedback on work prepared by staff auditors.
• Demonstrating and applying strong project management skills by directing daily progress of fieldwork, informing audit management and clients of audit status, and supervising staff performance.
• Utilizing knowledge of IT risks and controls to identify and document issues and recommendations.
• Preparing audit reports and communicating results to management.
• Maintaining current knowledge of audit and technology industry standards and best practices.

We’re excited to talk with you if:

• You have a Bachelor's degree or equivalent work experience. Disciplines in Accounting, Finance, Technology, or Business-related field preferred.
• You have 4+ years’ experience or equivalent in internal audit, internal control consulting, or IT risk management/compliance.

• You have a strong understanding of the audit process, including experience with developing a risk-based test approach, conducting interviews in order to gather information from all levels of management, and identifying and providing fact-based criteria to support conclusions.
• You have strong knowledge of internal audit methodologies and industry frameworks, such as Sarbanes Oxley (SOX), COSO, COBIT, ISO, NIST, and ITIL.
• You have a strong understanding of risks and controls, including knowledge of application controls, ITGCs, security configurations, IT systems, and infrastructure.

• You have strong analytical, technical and problem-solving skills, with strong attention to detail.
• You have strong verbal and written communication, collaboration, and time management skills.
• You have the ability to lead and motivate a team of auditors including effective delegation/follow up and review/critique of workpapers.
• You have strong interpersonal skills and ability to develop solid working relationships with others.

• You have demonstrated data analysis software skills using MS Excel or other CAAT tools.

Extra bonus points if: 

• You have one or more of the following Industry certifications: Certified Information Systems Auditor (CISA), Certified Information Systems Security Professional (CISSP), Certified in Risk and Information Systems Control (CRISC), Certified Information Security Manager (CISM), Certified Public Accountant (CPA), or Certified Internal Auditor (CIA).
• You have a general understanding of banking and financial services processes, including regulatory requirements and best practices. 

Applicants must have legal authority to work in the United States.  Work Visa sponsorship is not available for this position.

Compensation Range:

$69,230.00 - $149,000.00

The posted compensation range on this listing represents UMB’s standard for this role, but the actual compensation may vary by geographic location, experience level, and other job-related factors. In addition, this range does not encompass the full earning potential for this role. Please see the description of benefits included w