Sr. IT Auditor, Corporate Technology & Cybersecurity - HYBRID
Core
Lead day-to-day planning and fieldwork for assigned technology and cybersecurity audits, guiding staff auditors and developing evidence-based conclusions.
Role type
Senior IC IT Auditor (Cybersecurity & Technology)
Builds
Audit reports, findings, and recommendations for technology and cybersecurity controls.
Domain
Financial Services / IT Audit & Cybersecurity
Required skills
IT audit methodology, risk and control assessment, sampling, evidence evaluation, workpaper documentation, issue development, data analysis, script usage, configuration testing, stakeholder coordination
Preferred skills
Network security, Security Operations, Data Security, Data Privacy, Offensive Security, Vulnerability Management, Banking/financial-services experience, GLBA, Interagency Guidelines, SWIFT CSP, PCI DSS, OWASP, CIS Benchmarks, NIST CSF, NIST SP 800-series, Cloud service management (AWS, Azure, GCP), PKI, AuditBoard, Power BI, ServiceNow, Jira, SailPoint
Technologies
CyberArk/PAM, Active Directory, Firewalls, Network Security, WAF, SIEM, XDR, SOAR, DLP, Encryption, Key Management, Vulnerability Management, Microsoft Azure, AWS, Google Cloud
Responsibilities
Lead audit planning and fieldwork including walkthroughs, risk mapping, and test procedures; Guide staff auditors in completing test procedures and reviewing workpapers; Perform assigned audit procedures on technology programs like IAM, cloud security, and incident response; Inspect security-technology configurations against approved baselines; Document procedures, evidence, and conclusions in traceable workpapers; Analyze exceptions and support development of observations and recommendations; Draft audit findings, recommendations, and report sections.
Seniority
Senior, hands-on IC
