Director of Internal Audit

Essential Functions & Responsibilities

• Develop and execute a risk-based internal audit strategy and annual audit plan covering all legal entities and business lines.
• Establish and maintain audit standards, policies, and procedures in accordance with IIA standards and regulatory requirements.
• Serve as a trusted advisor to the Audit Committee and senior management on risk, internal controls, and governance effectiveness.
• Maintain independence and objectivity in accordance with Institute of Internal Auditors (IIA) standards and regulatory expectations.
• Provide regular reporting to the Audit Committee on audit results, control environment, emerging risks, and remediation progress.

Enterprise Risk Assessment and Audit Execution

• Lead the enterprise-wide internal audit risk assessment process, incorporating regulatory, operational, financial, technological, and compliance risks.
• Continuously monitor evolving risks, including third-party/vendor, cybersecurity, and regulatory developments affecting OCC-regulated banking and Federal Reserve-supervised entities.
• Align audit coverage with risk appetite and regulatory expectations including all aspects of the FFIEC guidance.
• Oversee execution and timely completion of operational, financial, compliance, and IT audits across all business units while leveraging the audit tool, Optro and identifying additional efficiencies through use of the tool.
• Maintain a high-quality audit methodology, including workpapers, documentation standards, and QA reviews.
• Drive use of data analytics and automation to enhance audit effectiveness and efficiency.

SOX & Internal Controls

• Lead the SOX (Sarbanes-Oxley) compliance program including: scoping, risk assessment, key control identification, and control design evaluation and operating effectiveness testing.
• Oversee walkthroughs, testing, deficiency evaluation, and remediation tracking.
• Partner with external auditors to ensure efficient audit coordination and reliance on internal work for both business process and IT controls.
• Provide reporting on SOX compliance status, deficiencies, and remediation progress to SOX Steering Committee and Audit Committee.

Issue Management & Remediation

• Establish and manage an enterprise issue tracking program.
• Monitor and validate timely remediation of SOX and audit findings, regulatory matters, and management-identified issues.
• Escalate significant control deficiencies and overdue issues to executive leadership and the Audit Committee.

Consultant & Co-Sourcing Oversight

• Manage external consultants and co-source internal audit partners, ensuring: proper scope definition and deliverables, timely completion of the audit, cost efficiency and effectiveness, and knowledge transfer to internal staff.

Regulatory Engagement

• Serve as a key liaison with regulators (Federal Reserve, OCC) on internal audit matters.
• Support regulatory examinations and ensure alignment of audit activities with regulatory expectations and guidance.
• Monitor and interpret changes in regulatory requirements impacting audit scope.

Stakeholder Engagement

• Build strong relationships with executive management, business leaders, and control functions.
• Communicate audit findings clearly and effectively to stakeholders at all levels.
• Influence management to strengthen control environments and address root causes of issues.

Education & Certification Requirements

• Bachelor's degree in Accounting, Finance, Business, or related field (Master's preferred).
• Professional certifications such as CPA, CIA, or CISA strongly preferred.
• 10+ years of progressive internal audit, risk, or public accounting experience, preferably within financial services with leadership experience.
• Experience Working Within Or Auditing OCC-regulated banking institutions Federal Reserve-supervised holding companies Fintech, payments, or lending platforms (highly desirable).