Technical IT Audit Lead

We need to output HTML fragment with headings

for sections: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. Only include sections that have real specific content. We must not repeat job title as heading. No Job ID etc. Remove boilerplate. Preserve all substantive info. We need to parse the posting. Given text: "IN0534 Fishers, NY0705 NY Region Business Office, OH0523 Independence Bus Office, OH0713 NW Bancshares HQ, PA0258 Bellevue Job Description The Technical IT Audit Lead performs specialized auditing tasks related to bank technology operations. This includes thorough and efficient planning, testing, reporting, and follow-up on audit results. The role is primarily engaged with audits of technical and emerging technology disciplines, such as cloud computing, cybersecurity, network security, application security, digital implementation, data governance and security. This position is guided by general instruction and a limited amount of supervision, and the candidate demonstrates a high level of autonomy and ability to exercise independent judgement. Essential Functions Work collaboratively with audit teams to lead and execute IT-related audits.Lead planning activities to identify significant risks, determine audit scope, and develop appropriate risk-based audit procedures.Be familiar with Northwest documentation/processes/procedures, and research/interpret relevance of specific regulations/current literature to audit work.Consult key personnel to assess business processes and the strength of their control environments.Collect and analyze necessary data for audits, evaluate information, and draw logical conclusions.Lead activities to prepare clear, detailed audit documentation evidencing the results of actual testing procedures in accordance with departmental standards and the Institute of Internal Auditors (IIA).Identify meaningful value-added recommendations for management to improve the adequacy, effectiveness, and efficiency of controls and related processes.Summarize and present audit results/findings to business unit management and audit management.Lead meetings involving various levels of management to effectively communicate audit status, align on significant audit issues, and recommend corrective actions.Prepare audit reports, including clearly written, concise audit observations that effectively communicate identified issues and their related corrective actions to stakeholders.Evaluate the quality of the corrective action taken to improve deficient conditions.Meet departmental continuing education requirements.Ensure compliance with Northwest’s policies and procedures, and Federal/State regulationsNavigate Microsoft Office Software, computer applications, and software specific to the department in order to maximize technology tools and gain efficiencyWork as part of a team Qualifications Bachelor's Degree Computer Science, Information Security, Information Systems, or ITCISA, CISSP, CISM Or Other Related Certification preferred5 - 6 years IT Audit, Information Security, Technology Governance-Risk-Compliance-related experience required6 - 8 years Financial Services/Banking-related experience preferredCandidate must possess extensive knowledge of and be fluent in the review of, but not limited to regulatory exam reports, compliance reports, third party risk associated with various business unitsBroad knowledge of financial services technology standards and frameworks (e.g., FFIEC IT Handbooks, NIST CSF, CSA Cloud Controls Matrix, PCI DSS) with the ability to interpret regulatory requirements and determine how to effectively assess business processes for compliance with applicable regulationsSolid knowledge of key technologies (e.g., Active Directory, Linux, iSeries Midrange, Azure, ServiceNow, Jira etc.). The pay range for this position is generally $100,000-$120,000 per year. Actual pay is based on various factors including but not limited to the successful candidate’s experience, skills, and knowledge. Additional bonus earning opportunities and benefits are also available. Northwest is an equal opportunity employer. We are committed to creating an inclusive environment for all employees." We need to remove boilerplate: "Northwest is an equal opportunity employer..." etc. Also remove location lines at top? The first line: "IN0534 Fishers, NY0705 NY Region Business Office, OH0523 Independence Bus Office, OH0713 NW Bancshares HQ, PA0258 Bellevue Job Description". That seems like location codes and maybe job description header. We should drop that as it's metadata (Job ID etc). So start after that. We need sections: About the role (maybe the introductory paragraph). Responsibilities (Essential Functions). Qualifications (education, certifications, experience). Skills (knowledge of technologies, frameworks). Benefits (Additional bonus earning opportunities and benefits are also available). Pay (pay range). Schedule (none given, so omit). Also maybe "Requirements" could be separate from Qualifications? Usually Qualifications includes education/experience; Requirements maybe same. But we need to follow instruction: Use headings for sections: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. We should include only those with real content. We have content for About the role (intro paragraph). Responsibilities (Essential Functions). Qualifications (education, certifications, experience). Skills (knowledge of technologies, frameworks). Benefits (Additional bonus earning opportunities and benefits are also available). Pay (pay range). Requirements maybe we could combine with Qualifications? But we have separate "Qualifications" heading in posting; also "Requirements" maybe not explicit. The posting includes "Qualifications" block with bullet-like statements. It also includes "Essential Functions". There's no explicit "Requirements" separate. Could we treat "Qualifications" as both? But we need to follow instruction: include a section ONLY when posting has real, specific content for it. So we should not create a Requirements section if no explicit content. However we could interpret that the qualifications block includes requirements (education, experience). But the heading "Qualifications" is present. So we will have Qualifications section. For Requirements, we might omit. Thus sections: About the role, Responsibilities, Qualifications, Skills, Benefits, Pay. Check if any content for "Schedule": none, omit. Now we need to format:

About the role

then

with prose. For lists, use

• . The Essential Functions is a list of duties; we can put each sentence as
• . The Qualifications block includes several statements; we can make list. Skills block includes knowledge of frameworks and technologies; we can list. Benefits: "Additional bonus earning opportunities and benefits are also available." That's a sentence; we can put as

  . Pay: "The pay range for this position is generally $100,000-$120,000 per year. Actual pay is based on various factors including but not limited to the successful candidate’s experience, skills, and knowledge." We'll put as

  . We must preserve all substantive info; do not invent or summarize away detail. So we need to keep all details from the posting. Let's extract the About the role paragraph: "The Technical IT Audit Lead performs specialized auditing tasks related to bank technology operations. This includes thorough and efficient planning, testing, reporting, and follow-up on audit results. The role is primarily engaged with audits of technical and emerging technology disciplines, such as cloud computing, cybersecurity, network security, application security, digital implementation, data governance and security. This position is guided by general instruction and a limited amount of supervision, and the candidate demonstrates a high level of autonomy and ability to exercise independent judgement." We'll keep that as a paragraph. Responsibilities (Essential Functions): list each bullet: - Work collaboratively with audit teams to lead and execute IT-related audits. - Lead planning activities to identify significant risks, determine audit scope, and develop appropriate risk-based audit procedures. - Be familiar with Northwest documentation/processes/procedures, and research/interpret relevance of specific regulations/current literature to audit work. - Consult key personnel to assess business processes and the strength of their control environments. - Collect and analyze necessary data for audits, evaluate information, and draw logical conclusions. - Lead activities to prepare clear, detailed audit documentation evidencing the results of actual testing procedures in accordance with departmental standards and the Institute of Internal Auditors (IIA). - Identify meaningful value-added recommendations for management to improve the adequacy, effectiveness, and efficiency of controls and related processes. - Summarize and present audit results/findings to business unit management and audit management. - Lead meetings involving various levels of management to effectively communicate audit status, align on significant audit issues, and recommend corrective actions. - Prepare audit reports, including clearly written, concise audit observations that effectively communicate identified issues and their related corrective actions to stakeholders. - Evaluate the quality of the corrective action taken to improve deficient conditions. - Meet departmental continuing education requirements. - Ensure compliance with Northwest’s policies and procedures, and Federal/State regulations - Navigate Microsoft Office Software, computer applications, and software specific to the department in order to maximize technology tools and gain efficiency - Work as part of a team Note: Some lines missing punctuation; we keep as is. Qualifications: The block: "Bachelor's Degree Computer Science, Information Security, Information Systems, or ITCISA, CISSP, CISM Or Other Related Certification preferred5 - 6 years IT Audit, Information Security, Technology Governance-Risk-Compliance-related experience required6 - 8 years Financial Services/Banking-related experience preferredCandidate must possess extensive knowledge of and be fluent in the review of, but not limited to regulatory exam reports, compliance reports, third party risk associated with various business unitsBroad knowledge of financial services technology standards and frameworks (e.g., FFIEC IT Handbooks, NIST CSF, CSA Cloud Controls Matrix, PCI DSS) with the ability to interpret regulatory requirements and determine how to effectively assess business processes for compliance with applicable regulationsSolid knowledge of key technologies (e.g., Active Directory, Linux, iSeries Midrange, Azure, ServiceNow, Jira etc.)." We need to parse into sensible items. It seems missing spaces and punctuation. We'll try to separate: - Bachelor's Degree in Computer Science, Information Security, Information Systems, or IT (maybe ITCISA?). Actually "ITCISA" maybe a typo for "CISA"? We'll keep as given: "ITCISA, CISSP, CISM Or Other Related Certification preferred" - 5 - 6 years IT Audit, Information Security, Technology Governance-Risk-Compliance-related experience required - 6 - 8 years Financial Services/Banking-related experience preferred - Candidate must possess extensive knowledge of and be fluent in the review of, but not limited to regulatory exam reports, compliance reports, third party risk associated with various business units - Broad knowledge of financial services technology standards and frameworks (e.g., FFIEC IT Handbooks, NIST CSF, CSA Cloud Controls Matrix, PCI DSS) with the ability to interpret regulatory requirements and determine how to effectively assess business processes for compliance with applicable regulations - Solid knowledge of key technologies (e.g., Active Directory, Linux, iSeries Midrange, Azure, ServiceNow, Jira etc.) We could split into Qualifications (education/experience/certifications) and Skills (knowledge of frameworks, technologies). But the instruction says we have separate Skills section. So we could put the education/experience/certifications under Qualifications, and the knowledge of frameworks and technologies under Skills. Thus Qualifications list: - Bachelor's Degree Computer Science, Information Security, Information Systems, or ITCISA, CISSP, CISM Or Other Related Certification preferred - 5 - 6 years IT Audit, Information Security, Technology Governance-Risk-Compliance-related experience required - 6 - 8 years Financial Services/Banking-related experience preferred - Candidate must possess extensive knowledge of and be fluent in the review of, but not limited to regulatory exam reports, compliance reports, third party risk associated with various business units Skills list: - Broad knowledge of financial services technology standards and frameworks (e.g., FFIEC IT Handbooks, NIST CSF, CSA Cloud Controls Matrix, PCI DSS) with the ability to interpret regulatory requirements and determine how to effectively assess business processes for compliance with applicable regulations - Solid knowledge of key technologies (e.g., Active Directory, Linux, iSeries Midrange, Azure, ServiceNow, Jira etc.) Benefits: "Additional bonus earning opportunities and benefits are also available." Pay: as earlier. Now produce HTML. We must not include any extra text, just HTML fragment. Let's craft:

  About the