Director of Internal Audit, IT

Position Summary

The Director of IT Audit will develop audit programs, manage, and perform IT audits and Sarbanes Oxley IT control testing, and provide guidance to internal clients on IT operations, processes, and internal controls. The IT Audit Director documents findings and provides recommendations for improvements to accomplish Bank objectives.

Duties & Responsibilities

Strategic Oversight & Leadership Responsibilities:

• Provide guidance to internal audit team members in all areas of job responsibilities, including, but not limited to providing direction on scoping and testing, providing feedback during audits, and reviewing audit work.
• Establish IT Audit strategic goals by gathering pertinent business, financial, service, and operations information, identify and evaluate trends, define objectives, and evaluate outcomes and adjust strategic direction as needed.
• Develop the annual IT audit plan and monitor quarterly metrics and assist in management reporting to the Board.
• Achieve department financial objectives, forecast annual expenses, and operate within budgetary guidelines, analyze variances, and adjust as needed.
• Develop and maintain policies and procedures for all IT Audit functions.
• Lead initiatives to improve team processes.
• Participate in the Bank's audit-related committees, as needed.

Manage Audit Process and Make Recommendations for Improvements:

• Manage assigned audits in a variety of IT areas.
• Plan, perform, and document audits in accordance with the professional standards, and within the budgeted hours.
• Report on results from audits; provide a root cause analysis as well as evaluate the quality of management action plans.
• Evaluate operational efficiency as part of the standard audit process and offer recommendations to management to enhance the value of the Bank.
• Analyze operational effectiveness of the internal audit team and provide recommendations for improvement to the Chief Audit Executive.

Stakeholder Communications & Relationship Management:

• Coordinate with external firms providing IT audit support.
• Develop and maintain trusted, positive relationships with employees, clients, and vendors.
• Lead conversations with external consumer banking regulators (FDIC, Fed, etc.), Senior Executive Management and the Board

Education & Experience

• Knowledge of:
  • Highly skilled in verbal and written communications, including preparing reports and making presentations to management.
  • Internal audit techniques and standards, and ability to direct and review the work of others.
  • Key IT areas and associated risk and internal controls including IT General Controls and Cybersecurity.
  • PowerBl or other visual data tools preferred.
  • Understanding of, or experience with, robotic process automation preferred.
  • Maintain professional and technical knowledge by remaining current on applicable federal and state laws and regulations applicable to the Bank; attending educational workshops; reviewing professional publications; establishing personal networks; participating in professional organizations.

• Ability to:
  • Effectively communicate across all levels of the organization
  • Set a climate for high performance to achieve internal audit metric goals.
  • Complete job assignments in a professional, timely and efficient manner; organize and prioritize work.
  • Maintain confidentiality; adhere to Busey Bank policies and procedures; comply with laws, regulations and industry best practices.
  • Operate as a champion and ambassador of the internal audit vision and strategy by demonstrating active support in interactions with the internal audit team and other bank personnel.

• Education & Experience:
  • Bachelor's degree with focus on information systems, computer science, data analytics, business, or accounting, or equivalent combination of education and/or work experience.
  • Master's degree with focus on cyber risk, information systems, business, finance, or accounting preferred.
  • Certified Internal Auditor (CIA), Certified Information Systems Auditor (CISA), Certified Information Systems Security Professional (CISSP), or other professional designation, or working towards a professional designation preferred.
  • More than 12 years of experience in IT audit, IT consulting, risk or other control-related function.
  • Experience at a federally regulated bank or financial services company, regulatory agency, legal, a