Audit Manager - Information Systems

About the role

The Audit Manager – Information Systems leads and executes IT audit engagements to evaluate the effectiveness of internal controls, risk management, cybersecurity, regulatory compliance, and technology governance across the organization. The role oversees audits from planning through reporting, partners with IT and Internal Audit leadership, communicates results and recommendations, and supports the continuous improvement of the organization's governance, risk management, and control environment.

Responsibilities

• Cross-train, lead, and develop a team of associates to promote maximum productivity, engagement, succession planning, and overall contribution to strategic organizational goals.
• Lead and manage information systems audits through managing audit lifecycle phases including controls testing, reporting, and follow-up activities, ensuring audits are completed within established timelines, budget, and quality standards.
• Develop information systems audit scopes, risk assessments, testing strategies, and work plans that align with organizational objectives and regulatory requirements.
• Facilitate audit walkthroughs with IT and key stakeholders to obtain audit-relevant information, evaluate process effectiveness, and identify opportunities to strengthen internal controls and mitigate risk.
• Develop and document audit functions including risk and control matrices (RCMs) and testing procedures to evaluate the effectiveness of information technology controls, cybersecurity safeguards, system access management, and business process controls.
• Communicate audit objectives, information requests, project status, and findings in a clear, professional, and collaborative manner with IT managers and key stakeholders.
• Foster productive relationships with IT managers and key stakeholders by articulating audit requirements, explaining the purpose and value of audit procedures, and maintaining a professional, solutions-oriented approach throughout the engagement.
• Review and validate audit documentation prepared by associates to ensure accuracy, completeness, consistency, and compliance with audit methodology standards.
• Actively engage in continuous learning to remain abreast of new technology and regulations impacting information system audit engagements and adapt to rapidly changing technology environments.
• Perform all additional duties as assigned.

Requirements

• Bachelor's Degree in Accounting, Information Systems, Information Technology, Cybersecurity, or a related field.
• Six (6+) years of IT audit, internal audit, risk management, information security, or technology consulting experience.
• CISA Certification required.
• Knowledge of IT audit methodologies, internal controls, and risk management practices.
• Knowledge of information systems, cybersecurity principles, and technology-related business processes.
• Familiarity with generative AI and other AI-enabled tools, with the ability to effectively incorporate these technologies into daily work activities to improve efficiency, innovation, and business outcomes.
• CISSP and/or CRISC certifications preferred.

Skills

• Relationship Management
• Project Management
• Communication and Facilitation (written and verbal; for regulators and external auditors)
• Critical Thinking and Problem Solving
• Analytical Thinking and Detail Orientation
• Proficiency in Microsoft Office/Productivity Tools (Excel, PPT, Word)
• Learning aptitude and adaptability
• Investigative and Research skills
• Knowledge of the banking industry

Physical Requirements / Working Conditions

Must be able to sit for long periods of time and use a computer keyboard and/or mouse requiring hand and wrist manipulation, while viewing computer screens.