Internal Audit - Dallas - Associate, Technology Audit - 10252614

About the Role

Provide independent assurance of the internal control structure within the firm's technology infrastructure and business systems. Leverage expertise in technology infrastructure, application development, cybersecurity, electronic trading, risk management, and anti-financial crime systems.

Responsibilities

• Manage and perform audit plans, including planning, execution, and reporting.
• Engage in regulatory interaction and manage finding remediation.
• Continuously assess risk and manage audit resources.
• Participate in firm control initiatives and industry/market forums.
• Drive discussions with senior technology stakeholders to understand risk drivers, control state, and impact.
• Define audit scope and design control testing steps to evaluate control adequacy and effectiveness.
• Design and execute tests to validate application system controls, including data analysis, code inspection, and system process re-performance.
• Analyze the design of controls around system architecture, focusing on security, availability, performance, and business impact.
• Evaluate the effectiveness of technology controls in business and technology processes.
• Validate that system features meet business, technology, and regulatory requirements.
• Present scope, progress, and results to internal audit management, technology, and business stakeholders.
• Evaluate management action plans to address control deficiencies.
• Apply data analysis techniques and data mining to derive conclusions and drive business decisions.
• Collaborate with application developers, system architects, engineers, and security practitioners to audit applications and systems.

Requirements

• Master’s degree (U.S. or equivalent) in Computer Science, Computer or Electronics Engineering, Information Systems, Cybersecurity, or a related computational and analytical field, and one (1) year of experience in the job offered or a related role.
• OR Bachelor’s degree (U.S. or equivalent) in the same fields with three (3) years of experience in the job offered or a related role.

Qualifications

Prior experience must include:

• One (1) year (with a Master’s degree) or three (3) years (with a Bachelor’s degree) of experience with:
• Information systems, networks, system architecture, design, information security, technology resiliency, risk and control governance, metrics, incident management, SDLC, vulnerability management, and data protection.
• Software development, information and cybersecurity, cloud computing, and development operations.
• Identifying, assessing, and relating technology risks to business risks.
• Data integrity, change management, incident and alert management, entitlement management, data backup and retention, performance and capacity management, technology frameworks, and system monitoring.
• Interpreting object-oriented programming languages (Java, C++), scripting languages (Python), and IDE environments (IntelliJ, Eclipse, NetBeans).
• Applying analytical and data analysis skills (SQL, Tableau) and performing data analytics, data mining, and database concepts.