Lead Technology Auditor

Internal Audit:

 

Internal Audit at Bessemer is an independent assurance and risk management function, reporting directly to the Audit Committee of the Board, with the mission of protecting the firm and enhancing its control environment. The Technology Audit Team partners with Bessemer’s businesses to provide assurance and advisory services for all technology-related functions of the firm including application delivery, technology infrastructure, information security and integrated business technology.

 

Role Description:

 

The Lead Technology Auditor serves as a team leader for individual technology audits and reports directly to the Director of Technology Audit. The successful candidate will supervise and execute assigned audits, mentor junior team members, and build and maintain strong relationships across Bessemer’s Technology businesses.

 

Responsibilities of the Lead Technology Auditor:

 

Planning – Identify and evaluate key processes, risks and controls; develop audit programs.

Fieldwork – Execute audit testing and control evaluation, including stakeholder interviews, clear and concise documentation, and assessment of operating effectiveness.

Findings and Issues – Identify and document potential findings and issues. Discuss with relevant stakeholders and assess the level of risk and impact.

Reporting – Draft audit reports, including overall risk evaluation of control environment, detailed audit findings and issues.

Leadership and Supervision - Provide leadership, tactical planning and execution of audits by applying technical information systems risk knowledge to define and achieve audit objectives. Review the work of audit team members and provide constructive feedback.

Coordination and Collaboration – Coordinate and communicate effectively with audit and client contacts to deliver work in a professional and timely manner.

Technology Risk and Control Framework – Leverage technology and financial industry regulations and guidance to assess risks and control design and operating effectiveness.

Communication – Deliver clear, timely and balanced written and verbal communications to peers, supervisors, and clients.

Critical Thinking – Demonstrate critical thinking by gathering, analyzing, questioning and sharing perspectives on areas under review.

Training and Development – Maintain awareness of trends, risks and controls in technology and information security through personal curiosity, training and networking.

 

 

 

Qualifications:

• Bachelor’s degree in computer science, information systems, or another relevant field.
• 5+ years of experience with technology & cybersecurity audit, IT operations, IT risk & compliance, or information security, preferably within the financial services industry.
• Technology auditing certification (e.g. CISA) or equivalent required. Relevant security certifications (i.e., CCSP, CISSP, etc.) preferred.
• Knowledge of general computer and application controls, cybersecurity, information security principles, software development lifecycle, business continuity & disaster recovery.
• Knowledge of technology governance and industry standards (e.g., FFIEC, NIST, CIS, OWASP, etc.).
• Effective organizational and project management skills.
• Effective communication (verbal, written, listening) and interpersonal skills.
• Healthy professional skepticism
• Strong critical thinking and problem-solving skills.
• Ability to build and maintain effective relationships with peers and business partners.

 

About Bessemer Trust:

Bessemer Trust is a leading multifamily office, overseeing more than $200 billion in assets for 3,000 individuals and families of substantial wealth. Its 1,200 employees are singularly focused on private wealth management — disciplined investment management, sophisticated wealth planning, comprehensive family office services, and highly personalized client service.<