Senior Internal Auditor

Purpose of Position:

The Senior Auditor (VP) is responsible for independently leading and executing risk-based internal audit assignments across operational, financial, regulatory compliance, information technology (IT), information systems (IS), cybersecurity, and integrated audit areas. The role performs audit planning, risk assessment, control evaluation, testing, documentation, and reporting with minimal supervision while serving as a trusted advisor to management on risk management, governance, regulatory compliance, technology controls, and process improvement opportunities.

This position also plays a key role in leveraging data analytics and technology-enabled auditing techniques, supporting Audit Committee reporting, coordinating regulatory requests, and providing expertise related to IT governance, information security, cybersecurity, system implementations, and automated controls.

This is an individual contributor role and does not have direct people management responsibilities.

Essential Job Functions:

1. Applies knowledge of banking operations, technology environments, information systems, cybersecurity risks, and regulatory requirements to develop and maintain risk assessments and contribute to the annual audit planning process.
2. Obtains and documents an understanding of business processes, technology platforms, system interfaces, data flows, and supporting controls to identify and evaluate risks and the effectiveness of related internal controls.
3. Develops risk and control matrices (RCMs), audit programs, testing strategies, and audit procedures for operational, financial, compliance, IT, IS, cybersecurity, and integrated audits with minimal supervision.
4. Performs operational, financial, compliance, information technology, cybersecurity, and substantive testing procedures for internal audits, regulatory examinations, external audit support, and Sarbanes-Oxley (SOX) compliance activities.
5. Evaluates the design and operating effectiveness of key controls, including automated controls, application controls, IT general controls (ITGCs), information security controls, cybersecurity controls, and data governance controls.
6. Assesses technology-related risks involving infrastructure, cloud services, cybersecurity, third-party providers, system implementations, logical access, user provisioning, change management, data protection, and business continuity.
7. Partners with business and technology stakeholders obtain audit evidence, conduct interviews, and evaluate processes and control environments.
8. Ensures audit assignments are appropriately documented, accurate, complete, and completed within budget and established timelines.
9. Prepares clear, concise, and well-supported audit reports, issue summaries, and other written communications with minimal supervision.
10. Resolves review notes, management inquiries, and audit-related requests promptly and professionally.
11. Serves as a department resource on data analytics, continuous monitoring, technology-enabled auditing, artificial intelligence (AI) applications, and audit automation techniques.
12. Utilizes data analytics tools and techniques to identify risk indicators, analyze large data populations, improve audit efficiency, and enhance audit coverage.
13. Maintains effective working relationships with Internal Audit Management, business line management, technology teams, external auditors, regulators, and other stakeholders.
14. Provides timely communication to Internal Audit Management regarding audit progress, emerging risks, control deficiencies, cybersecurity concerns, and significant issues identified during audits.
15. Keeps current on banking regulations, auditing standards, information technology trends, cybersecurity risks, emerging technologies, and industry best practices.
16. Maintains continuing professional education and relevant certifications.
17. Maintains appropriate levels of confidentiality and professionalism in handling sensitive Bank information.
18. Performs other duties and special projects as assigned

Education and Experience:

1. Bachelor’s degree in accounting, Finance, Information Systems, Computer Science, Cybersecurity, Business Administration, or a related field.
2. Minimum 3-5 years of experience in internal audit, external audit, public accounting, IT audit, information security audit, risk management, regulatory compliance, or financial services auditing, preferably within the banking industry.
3. Experience conducting operational, compliance, financial, IT, information systems, cybersecurity, or integrated audits.
4. Experience evaluating IT General Controls (ITGCs), application controls, automated controls, interfaces, system implementations, third-par