IT Assistant General Auditor (Director)

Job Type

IT Assistant General Auditor

General Description

Responsible for oversight of the Audit Division's operations. Supports General Auditor to develop, manage, promote, and integrate all aspects of the assigned area to meet both client needs and organization objectives. Provides direction and guidelines to employees. Primary job responsibilities include monitoring the audit and assurance project management, resource management and the ability to support a culture of innovation and continuous improvement by implementing efficiency ideas into processes and policies.

Essential Duties and Responsibilities

Strategic Oversight & Leadership:

Lead and oversee the IT and Cyber audit function, including quality assurance aligned with IIA Standards

Monitor progress against the annual IT audit plan across all technology domains

Serve as a subject matter expert to the General Auditor, executive management, and the Audit Committee on IT governance, technology risk, and cybersecurity

Technical Governance & Execution:

Provide strategic oversight of IT and Cyber audit engagements, including scoping, risk assessment, and control evaluation

Provide oversight and quality review of IT-related control testing

Oversee the adoption of audit AI, data analytics tools, and other emerging technologies

Stakeholder Management & Reporting:

Assist the General Auditor in preparing Audit Committee presentations and responses to regulatory examinations

Represent Internal Audit in technology governance forums and risk committees

Monitor IT audit metrics, key performance indicators, and performance targets

People Leadership & Development:

Oversee IT audit staffing, resource planning, and capacity management

Lead performance evaluation, mentoring, and professional development for IT audit teams

Drive innovation, process improvement, and enhancements to audit methodology

Education

Bachelor’s degree in Computer Science, Information Systems, Information Technology, Cybersecurity, Business Administration, Accounting, or related field.

Experience

Seven (7) or more years of experience overseeing, planning, developing, and executing IT and Cyber audits, reviews, and advisory engagements.

Seven (7) or more years of experience in public accounting, internal audit, or the financial services industry, with an emphasis on IT and Cyber risk.

Demonstrated leadership experience managing audit teams, including hiring, performance management, coaching, and mentoring

Certifications / Licenses

Certified Information Systems Auditor (CISA) - Required

Additional ISACA certifications or certificates - Preferred

Certified Internal Auditor (CIA) - Preferred

ISC2 certifications or certificates - Preferred

Other Qualifications

Regulatory & Framework Knowledge

Deep understanding of the IIA Global Internal Audit Standards

Strong knowledge of COBIT as an IT governance framework

Expertise in NIST Cybersecurity Framework and NIST SP 800 series

Comprehensive understanding of the FFIEC IT Examination Handbook

Knowledge of ISO 27001/27002 information security standards

Understanding of SOX requirements, ITGCs, and application controls

Banking, Risk, and Regulatory Environment:

Strong knowledge of regulatory expectations issued by the Federal Reserve, OCC, FDIC, and FFIEC

Understanding of data privacy regulations (GDPR, CCPA, GLBA)

Strong understanding of internal auditing, risk management, and the financial services control environment, including the ability to interpret financial information and related governance expectations

Technical & Emerging Technology Understanding:

Thorough knowledge of cybersecurity best practices and emerging threats

Understanding of emerging technologies, including AI/ML, robotic process automation, blockchain, and quantum computing

Understanding of cloud service models and shared-responsibility concepts from a risk and control perspective

Comprehensive understanding of IT control environments, information security standards, best practices, and applicable laws and regulations

Leadership & Soft Skills

Exceptional leadership, people management, and team-building skills

Excellent bilingual communication skills in English and Spanish, both verbal and written, with the ability to communicate effectively with technical and non-technical audiences

Strong executive presence and presentation skills for management, the Audit Committee, regulators, and other stakeholders

Strategic thinking, sound judgment, business acumen, and strong analytical skills to identify issues, evaluate alternatives, and make effective decisions

Strong project and program management skills, including the ability to prioritize competing demands, work independently, adapt to changing circumstances, perform under pressure, and meet deadlines

Outstanding interpersonal and organizational skills to build effective relationships, operate across all levels of management, and respond proactively to stakeholder needs

Technical Skills & Tools:

Proficiency in audit analytics, reporting, and data interrogation tools, including ACL, Arbutus/IDEA, SQL, Python, Power BI, and Tableau

Proficiency in Microsoft Office, Microsoft 365, and collaboration tools used to support audit execution, reporting, and communication

Additional Requirements

Excellent analytical skills to identify situations, look for alternatives and make good decisions.