Director Internal Audit, Technology Risk

To be effective, an individual must be able to perform each job duty successfully.

• Conducts organizational audit risk assessment for purposes of developing the Technology Risk annual audit plan, and reviews and revises the plan quarterly or as needed. Communicates and reviews results of risk assessment and annual audit plan with Supervisory Committee.

• Oversees performance of Technology Risk audits throughout the credit union.

• Oversees, directs and manages daily workflow of senior and staff auditors to ensure audit schedule is maintained.

• Oversees quality control activities of the Technology Risk audit team, including coordinating regular peer reviews of department processes.

• Evaluates and assesses governance, culture, risk, and control structure and environment.

• Evaluates efficiency and effectiveness of team and consults with VP to continuously improve audit processes.

• Analyzes and prepares annual team financial budget based on assessed needs, and submits these requests to the VP of Internal Audit.

• Reviews or oversees review of work papers prepared by team for adherence to department procedures and the Institute of Internal Auditors (IIA) standards. Provides appropriate feedback, as necessary.

• Reviews internal audit reports prior to issuance for adherence to department procedures and the IIA standards. Provides appropriate feedback, as necessary.

• Evaluates new auditing standards, regulations, and accounting pronouncements, as applicable.

• Assists VP in developing, maintaining, and distributing monthly internal audit status reports for distribution to Executive Management, Supervisory Committee, and Board of Directors

• Complies with all regulations as required by law, including but not limited to Bank Secrecy Act, OFAC, FACT Act, GLBA, Regulation CC (funds availability), Regulation DD (TIS) and other regulations as required by law as it relates to the position.

• Performs other duties as assigned.

KNOWLEDGE, SKILLS, and ABILITIES

The requirements listed are representative of the knowledge, skills, and/or abilities required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential job functions.

Experience

• Minimum 10+ years experience conducting IT audits/control assessments in the banking or financial services industry, including at least five years in an internal audit management capacity.

• Solid understanding of internal control concepts with the ability to evaluate and determine the adequacy of controls by considering business and technology risks in an integrated manner.

• Extensive experience of applying effective and innovative data analytics techniques to assess processes and controls against risk.

• Advanced knowledge and experience leading data security, risk assessment & reporting, and control evaluation, design, and governance.

• Understanding of cloud technologies.

• Extensive experience on effectively leading and managing large complex technology audits.

• Prior experience with Big 4 accounting firm within Technology Risk team preferred.

Education

Degree in technology and/or Advanced Degree in Management Information Systems, or related field.

Licenses, Certificates, Registrations

Related professional certification such as CISA, CISSP, or CIA required.

Computer/Office Equipment Skills

• Advanced level skill for Microsoft Office (Outlook, Word, PowerPoint, Excel), especially Excel.

• Experience with data analysis required.

• Knowledge of computer assisted audit techniques preferred.

Managerial Responsibility

• Has supervisory/managerial responsibilities that are direct or through work leaders or assistants, typically with a subordinate group of 4 to 8 employees.

• Estimates personnel needs and assigns work to meet these needs.

• Supervises, coordinates and reviews the work of assigned staff.

• Recommends candidates for employment, conducts performance evaluations and salary reviews for assigned staff, and applies company policy.

• Includes senior department heads without staff, assistant manager, or manager.

Interpersonal Skills

A significant level of trust and diplomacy is required, in addition to normal courtesy and tact. Work involves extensive personal contact with others and is usually of a personal or sensitive nature. Work may involve motivating or influencing others. Outside contacts become important and fostering sound relationships with other entities (companies and/or individuals) becomes necessary and often requires the ability to influence and/or sell ideas or services to others.

Language Skills

Must have the ability to read, understand and carry out instructions in written and oral form. Ability to communicate effectively and courteously. Strong written communication skills required.

Other Skills and Abilities

• Understanding of financial institution operations and transactions.

• Advanced understanding of accounting principles and COSO framework.

• Advanced understanding of information technology and security risks and controls (including COBIT framework).

• Advanced understanding of applicable regulations, as outlined in Essential Duties and Responsibilities above.

• Ability to understand regulations.

• Understanding of credit union data system and ability to use a computer and software applications.

• Ability to think critically and recognize and analyze problems, improprieties, and opportunities for improvement.

PHYSICAL ABILITIES / WORKING CONDITIONS

Physical Demands

Ability to talk, hear, sit, use hands to handle or feel and reach with hands and arms consistently. Ability to stand, walk, kneel and crouch occasionally

Vision Requirements