Director – Internal Audit Information Technology

FLSA Status: Exempt | Work Arrangement: Hybrid (3 days on-site in Sugar Land, TX office) | Travel: Occasional, up to 20%

About the Role

The Director of Internal Audit Information Technology will be responsible for planning, executing, and overseeing all aspects of IT audit activities within the credit union. This role includes performing comprehensive IT audits, managing oversight of IT audits conducted by external consulting firms, and ensuring compliance with industry regulations and best practices. The IT Director will collaborate with executive management and other departments to provide assurance on the effectiveness of IT-related controls, identify opportunities for improvement, and mitigate risks related to information technology.

Responsibilities

• Partner with all levels of management and lines of business to develop business-oriented solutions that improve controls, mitigate risks, and influence positive change.
• Collaborate across the three lines of defense regarding business processes, risks, and controls; identify thematic risk trends across the organization.
• Continuously monitor the organizational risk profile and operational environment; modify the audit schedule, risk assessment, and audit universe as necessary.
• Build and maintain strong relationships with business partners to align business strategy with risk management practices and controls.
• Lead the development and implementation of an audit plan and strategy using a risk-based methodology, including performing and designing risk assessments to support a forward-looking audit plan.
• Train the team on the use of audit workpapers; determine appropriate audit cycles, resources, and estimated expenses for the 12–18-month audit plan.
• Present sections of the Audit Plan to senior leadership and the Board Audit Committee for approval; monitor audit engagement progress and adjust as needed.
• Assess the adequacy of management’s action plans for addressing and correcting audit findings; monitor progress through regular follow-up.
• Oversee the IA Department’s technology and IT vendor management activities; solicit, analyze, and negotiate third-party audit engagements.
• Design process improvements and standardize audit processes, methodologies, and guidelines; evaluate current practices and provide thought leadership on industry best practices.
• Ensure consistency and compliance with internal and professional standards; represent the audit division at quarterly Board Audit Committee meetings.
• Prepare and present audit reports, audit plan status, and corrective action plan updates to the Audit Committee.
• Manage ongoing assessments of the changing risk profile; interface with management to ensure effective, collaborative, and inclusive controls.
• Conduct financial, operational, and compliance audits, including planning, fieldwork, and report writing; identify control gaps, analyze root causes, and communicate findings to management.
• Recruit, develop, manage, coach, and mentor audit team members with a focus on career development and succession.
• Contribute to the development of monthly/quarterly Audit Committee packages.

Qualifications

• Bachelor’s degree in Information Technology, Computer Science, Accounting, or Business from an accredited university (required).
• Master’s degree in Accounting, Business, or a related field (preferred).
• Certified Information Systems Auditor (CISA) (required).
• Additional certifications such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Internal Auditor (CIA), or Certified Public Accountant (CPA) (preferred).
• Certified Financial Services Auditor (CFSA) and Certified Risk Professional (CRP) (desirable).
• Ten years of experience as an information technology internal auditor managing audit engagements in a financial institution or related organization.
• Senior-level audit management experience.
• Seven to ten years of supervisory/managerial experience.
• Proficiency in IT COBIT, NIST Cybersecurity Framework (CFS), Information Security Management, and in-depth knowledge of internal audit standards and best practices.

Skills

• Strong proficiency in IT audit methodologies, IT risk management, cybersecurity, and regulatory requirements for financial institutions.
• Exceptional analytical, problem-solving, and decision-making abilities.
• Strong system data analytic knowledge and proficiency.
• Ability to present complex IT issues to non-technical stakeholders.
• Strong skills in using audit workpaper management tools and IT audit frameworks.
• Excellent interpersonal, leadership, and communication (written and oral) skills.
• Ability to engage and influence senior executives, establish collaborative partnerships, and provide thought leadership.
• Excellent planning and operational deployment skills; ability to translate vision, strategy, and business requirements into actionable goals.
• Strong strategic and process thinking abilities; proactive in identifying opportunities, solutions, and process improvements.
• Ability to manage projects, milestones, tasks, resources, and risks/dependencies in a fast-paced environment.
• Demonstrated strong technical expertise, leadership skills, and strategic thinking to enhance the IT audit function.
• Ability to work as a leader or participant in large, cross-functional teams or as an individual contributor.
• Unquestionable business and personal integrity with values aligned to the organization.
• Results-oriented with the ability to direct or manage multiple projects simultaneously.

Physical Demands and Work Environment

While performing the essential duties of this position, an employee would frequently be required to stand, walk, and sit. Specific vision abilities required include close vision, distance vision, and the ability to adjust focus. The noise level in the work environment is usually moderate.