Senior IT Audit Specialist

Rockland Trust is a full-service commercial bank and financial services company committed to helping our neighbors reach their financial goals. Founded in 1907 and headquartered in Massachusetts, we proudly serve individuals, families, and businesses throughout New England with a strong emphasis on personal relationships, local decision making, and community impact.

With a broad range of banking, wealth management, and investment solutions, Rockland Trust combines the resources of a growing financial institution with the personalized service of a community bank. Our long-standing philosophy, Where Each Relationship Matters®, guides how we work with our customers, colleagues, and communities every day.

At Rockland Trust, our employees are at the heart of our success. We foster a collaborative, inclusive, and values driven culture that encourages professional growth, innovation, and work life balance. We are deeply committed to community involvement, financial education, and creating a workplace where individuals can build meaningful, long-term careers.

About the Role

Rockland Trust is seeking an experienced and highly motivated Senior IT Audit Specialist to join our growing Internal Audit team. This role offers the opportunity to work across a broad range of technology and cybersecurity environments while helping strengthen the Bank's risk management, governance, and control framework.

The ideal candidate will bring deep IT audit expertise, strong analytical skills, and a passion for identifying opportunities to enhance controls, manage risk, and support the Bank's strategic objectives. As a trusted advisor, this individual will partner with management and business leaders to assess risks across technology infrastructure, information security, applications, and emerging technology initiatives.

This position plays a key role in executing the annual IT audit plan, evaluating technology-related controls, supporting regulatory compliance initiatives, and providing independent assurance over critical systems and processes. The Senior IT Audit Specialist will also contribute to the evolution of the Bank's IT audit strategy while serving as a subject matter expert in key technology domains.

Responsibilities

The Senior IT Audit Specialist will:

• Lead and execute risk-based audits covering IT Governance, Cybersecurity, Information Security, Technology Operations, Cloud Computing, Infrastructure, Data Management, Digital Banking, and Emerging Technologies.
• Partner with business audit leads to execute General IT Controls (GITC) testing as part of integrated audit engagements.
• Independently plan, scope, perform, and deliver audit engagements in accordance with Internal Audit standards and regulatory expectations.
• Evaluate the design and effectiveness of technology controls supporting critical business processes, applications, and infrastructure.
• Identify control weaknesses, emerging risks, process improvement opportunities, and potential efficiencies.
• Support the IT Audit Director in developing and executing the annual IT Audit Plan and long-term audit strategy.
• Serve as a subject matter expert in areas including cybersecurity, cloud technologies, APIs, middleware, DevSecOps, networking, database platforms, AI governance, and technology resilience.
• Assess compliance with regulatory requirements and industry frameworks, including FFIEC guidance, GLBA, NIST, CIS, SOX, and applicable privacy regulations.
• Lead audits of technology transformation initiatives, digital banking platforms, third-party technology providers, and cloud service environments.
• Perform and oversee IT General Controls (ITGC) reviews and SOX testing activities.
• Utilize data analytics and automation tools to identify trends, anomalies, and control gaps.
• Prepare high-quality audit reports, presentations, and executive summaries for senior management and Audit Committee reporting.
• Validate management action plans and remediation efforts related to audit findings and regulatory observations.
• Support internal and external examinations, regulatory reviews, and independent assessments.
• Build and maintain e