Senior Associate, Technology Audit

When you join Sallie Mae, you become a champion for all students. We're on a mission to power confidence as students begin their unique journey — to help them plan their higher education, successfully finish, and prepare for life after school. Students need guidance navigating this important time in their life. They need a partner willing to evolve and not only meet but surpass their expectations. We're changing, because students need a better way. We're looking for people who are excited to drive this transformation, break barriers, and think of new ways to adapt, help, and create better experiences for students — and for each other. This is where diverse backgrounds, beliefs, and perspectives matter, and where you're empowered to bring your authentic self to work.

About the Role

The Senior Associate, Technology Audit will be responsible for planning and executing technology-focused audits, evaluating the efficiency and effectiveness of IT controls, and assessing the overall IT governance framework.

Responsibilities

• Conduct comprehensive technology audits, including IT general controls, application controls, system development life cycle, cybersecurity, and other related areas.
• Assess IT processes, systems, and controls to identify risks, evaluate their impact, and recommend appropriate remedial actions.
• Evaluate the effectiveness of IT governance, risk management, and internal control processes.
• Identify control deficiencies and areas for improvement, and provide practical and actionable recommendations to enhance IT controls and processes.
• Conduct post-audit follow-up to verify the implementation and effectiveness of recommended actions.
• Prepare clear and concise audit reports, summarizing findings, recommendations, and management responses.

The above information describes the general nature and level of work performed by employees assigned to this role; it is not a comprehensive inventory of all duties, responsibilities, and qualifications required.

Requirements

• Proficient in evaluating and testing IT general controls, application controls, and cybersecurity controls.
• Experience in assessing emerging technology risks, such as cloud computing, artificial intelligence, and blockchain.
• Familiarity with auditing data analytics and automated controls is advantageous.
• Solid knowledge of industry regulations and standards (e.g., SOX, GDPR, ISO 27001).
• Excellent analytical and problem-solving skills, with the ability to identify control deficiencies and propose practical solutions.
• Strong project management abilities, including the ability to prioritize tasks, meet deadlines, and manage multiple assignments simultaneously.

Qualifications

• Bachelor's degree in information technology, computer science, or a related field.
• A master's degree or professional certifications (e.g., CISA, CISSP) are a plus.
• 3+ years of relevant experience in technology audit, IT risk management, or a related field.

Benefits

• Competitive base salaries
• Bonus incentives
• Generous PTO, floating holidays, and 12 Federal Holidays observed
• 401(k) with employer match
• Comprehensive medical, dental, vision, hospital indemnity, critical illness, and pet insurance
• Employer-paid short-term/long-term disability and basic life insurance
• Flexible hybrid working arrangements
• Paid parental leave and adoption reimbursement programs
• Free access to on-site staffed fitness centers (in Delaware) and gym subsidy for locations outside Delaware
• Confidential counseling support (EAP), Health Advocacy services, and a Wellness program with financial incentives
• Tuition reimbursement and family scholarship programs
• Career development and training opportunities