IT - Internal Audit - Senior Associate (Flexible Hybrid)

Company Description

At Fannie Mae, futures are made. The inspiring work we do helps make a home a possibility for millions of homeowners and renters. Every day offers compelling opportunities to impact the future of the housing industry while being part of an inclusive team thriving in an energizing, flexible environment. Here, you will grow your career and help create access to fair, affordable housing finance.

Job Description

Our team of trusted audit professionals evaluates various aspects of Fannie Mae’s business and IT environments. From complex business processes to cutting edge technologies, our audits cover a broad range of topics which provides a challenging environment with tremendous opportunities for personal growth.

Within IT Audit, our integrated team focuses on evaluating Fannie Mae’s complex environment of business processes and the supporting technology and services. We conduct audits focused on highly visible topics from Finance, Single-Family, Multifamily, and Capital Markets to user access, change management, resiliency, cyber security, data management, and cloud technologies. Our team also focuses on supporting business audit teams with the planning, executing, and reporting the results of these business centric audits.

THE IMPACT YOU WILL MAKE

The IT - Internal Audit - Senior Associate role will offer you the flexibility to make each day your own, while working alongside people who care so that you can deliver on the following responsibilities:

• Apply specialized technical knowledge and expertise to perform reviews relating to the full IT life cycle of models, information technology applications, or risk management/analysis used across the company.
• Successfully perform all key job functions of the Staff IT Auditor role at a higher level of complexity, scope and autonomy. Coordinate and lead audit team meetings to discuss the audit plan, including audit background, preliminary objectives/scope (identified during the Annual Audit Planning process), audit budget, audit execution schedule, affected departments, contacts and expectations. Take ownership and independently manage subsets of audits with minimal oversight from IT Audit Management.
• Provide day-to-day project management for assigned areas. Prepare high-quality work papers and other documentation, leveraging manager guidance as needed. Timely address work paper review comments.
• Assist with identifying risks and assessing the potential impact of risks on the organization; Follow a risk-based approach to execute audit plans as appropriate and suggest areas requiring additional analysis.
• Review process and procedure documentation to determine risks and the potential impact of risks to the organization. Perform root cause analysis on exceptions identified during audits. Validate and document Risk Control Matrix; write test procedures based on Risk Control Matrix.
• Write audit issues, discuss with audit management and validate issues with customers; assist with additional report writing as needed. Assist with tracking results of prior audits, identifying audit themes across organizations and determining if appropriate corrective action has been taken regarding significant audit concerns.
• Contribute to strengthening and improving the governance, risk and control environment of the organization; share issues, ideas and recommendations with the Internal Audit Management and other Internal Audit teams.
• Provide advice and share Internal Audit knowledge with business partner managers and staff to strengthen governance, risk and control environments, as appropriate.
• Assist the audit team in creating regular points of view by compiling and analyzing relevant data.

Qualifications

THE EXPERIENCE YOU BRING TO THE TEAM

Minimum Required Experiences

• 2 years

Desired Experiences

• Bachelor degree or equivalent
• Minimum 2 years IT Audit experience in a professional services firm or larger corporation
• Studying towards or having a CISA qualification is a distinct advantage.
• In-depth knowledge of various IT infrastructure, applications, and operating systems.
• In-depth knowledge of IT General Controls (ITGCs) scoping, defining audit approach (design assessment and operational effectiveness testing).
• Direct experience with conducting design walkthroughs and ITGC operational effectiveness testing.
• Understanding of secondary mortgage market is highly desirable.
• Experience with audit finding identification, documentation, and root cause analysis.
• Experience with risk analysis.
• Understanding of the relationship between the risk and the control.
• Proficient with audit exception follow up and exception resolution.
• Able to work effectively as individual or in group.