VP, Internal Audit - Technology

Job Description:

Role Summary/Purpose:

The VP, Internal Audit – Technology will be responsible for managing and overseeing the IT Audit team focused on delivering independent and objective assurance over the organization’s technology function and related risks.    This role will manage the delivery of the IT Audit Plan and ensure effective overall audit coverage of IT risk across the company.  The incumbent will also be responsible for driving enterprise coverage and assessments of IT risk management and control design/effectiveness to support our Risk Governance Framework assessment. This role will report to the SVP, Internal Audit – Tech & Ops, Risk, Credit and Growth. 

Our Way of Working

We’re proud to offer you choice and flexibility. At Synchrony, our way of working allows you to have the option to work from home, near one of our Hubs or come into one of our offices. Occasionally you may be required to commute to our nearest office for in person engagement activities such as business or team meetings, training and culture events.

Essential Responsibilities:

• Manage and deliver the IT Audit Plan which includes all aspects of the company’s IT environment and IT risk profile (including scoping, risk assessment, fieldwork, testing, control evaluation, and reporting)
• Develop strong and effective relationships with key stakeholders across the organization and lines of defense including ELT and  process owners as well as regulators and external auditors
• Influence senior management on matters which will have significant impacts with respect to IT risk
• Present audit findings to various levels of IT, business management, and governance committees
• Oversee the validation of management remediation for regulatory and internal issues (e.g., MRA validation)
• Remain current on emerging technology risks, industry trends, and new regulations to inform audit approaches and risk assessments
• Develop and maintain industry connections to leverage for identifying best and leading practices to drive continual improvements
• Oversee and elevate continuous monitoring activities and related outputs for IT risk including identification of themes and trends impacting the IT control environment
• Serve as  the department’s subject matter expert and senior technical resource to drive IT risk coverage and awareness
• Support regulatory examinations and internal/external audit requests as needed
• Develop and maintain industry leading practices for Gen AI audit coverage and Gen AI enablement
• Drive the use of data analytics and innovation tools for usage in audit engagements
• Perform other duties and/or special projects as assigned

Qualifications/Requirements:

• Bachelor’s degree in finance, Information Technology, Computer Science, MIS, Accounting, Business, or related field.
• 10+ years of progressive experience in IT Audit, IT Risk Management, Information Security, or related field, ideally within financial services or another regulated industry.
• Certified Information Systems Auditor (CISA), Certified Internal Auditor (CIA), Certified Public Accountant (CPA), or related certification
• Strong understanding and experience in audit methodology, standards, and practices, including Institute of Internal Auditors standards
• Must be willing to travel up to 10% of the time

Desired Characteristics:

• Experience overseeing and executing technology audits, including, but not limited to, ITGC, cybersecurity, application controls, and systems (mainframe, distributed, cloud, databases).
• Relevant professional certification(s) such as CISSP, CISM, CRISC, or equivalent.
• Strong knowledge of current technology frameworks, information security, and data privacy requirements.
• Demonstrated ability to work independently, manage multiple assignments, and effectively prioritize.
• Excellent analytical, organizational, and communication skills (verbal and written).
• Proven ability to assess root causes and recommend practical solutions to complex control or technical issues.
• Proficient in Microsoft Office Suite and familiarity with GRC/audit management tools.
• Experience working with regulatory bodies (OCC, Fed, FDIC, CFPB, etc.) is a plus.
• Experience with data center, cloud, and cyber risk controls preferred.
• Strong interpersonal skills for effective collaboration across IT, business, and audit teams.
• Strong critical thinking and problem-solving abilities.
• Ability to adapt and thrive in a dynamic, team-oriented environment.
• Willingness to learn new technologies and audit to