Internal Auditor

Purpose of Job

The Internal Auditor is responsible for establishing, scaling, and managing the Credit Union’s newly formed Internal Audit function. Operating as a hands-on generalist, this role provides independent, objective assurance designed to safeguard assets, improve operational efficiency, and mitigate risk across the organization. This position is responsible for enhancing and developing the risk-based audit universe, building out testing workflows, and acting as a critical liaison between executive leadership, the Supervisory Committee, and regulatory bodies. Training will be provided for the person chosen for this position.

Key Responsibilities

• Audit Plan Development (25%)
  • Review current procedures and processes to compare and develop audit processes to industry best practices.
  • Conduct organization-wide risk assessment to identify high-exposure areas.
  • Design, schedule, and execute a comprehensive, annual risk-based audit plan tailored to a ~$500 Million asset structure.

• Vendor Management Reviews (15%)
  • Establish a rigorous, periodic review process for the third-party vendor management program, verifying that due diligence, SOC reports, and contract SLAs are continuously maintained.

• Operational & Lending Quality Control (40%)
  • Perform end-to-end audits of core operational areas, including accounting, ACH/wire transfers, branch operations, IT, cards and human resources.
  • Review consumer and mortgage lending pipelines to verify underwriting process consistency, loan documentation compliance, and proper lien perfection.
  • Systematically audit system configuration modifications, employee account activity, fee waivers, and teller override logs.
  • Review new account processes and documentation.
  • Review file maintenance reports including address changes, name changes and other processing reports.
• Governance, Reporting & Committee Collaboration (10%)
  • Prepare clear, data-driven, written audit reports outlining findings, root causes, financial exposure, and corrective action plans.
  • Present independent audit findings directly to Executive Management and the Supervisory Committee.
  • Build and maintain a centralized Audit Tracking Database to monitor management’s progress on resolving internal and external findings.
• Regulatory Liaison & Exam Facilitation (10%)
  • Serve as the primary operational point of contact for NCUA examiners and external CPA firms.
  • Coordinate the collection and vetting of pre-exam documentation to ensure a seamless, organized regulatory review process.
  • Validate the independent testing protocols for Bank Secrecy Act (BSA), Anti-Money Laundering (AML), and OFAC compliance.

Additional Responsibilities

Includes but not limited to:

• Policy Consultation: Provide objective, consultative internal control feedback to department heads during the revision or creation of operational policies and procedures. Suggest objective risk-based suggestions for review based upon changing circumstances.
• Professional Development: Maintain ongoing training, regulatory awareness, and professional certification renewals related to credit union compliance and audit methodologies.
• Ad-Hoc Investigations: Assist management and the Supervisory Committee with confidential, special investigations or unexpected look-back projects as requested.
• Backup OFAC: Act as a backup to the BSA function and help, only minor backup if called for.

Preferred Qualifications & Certifications

• Experience: 2 + years of financial institution experience, with a strong preference for background in bank or credit union internal audit, risk management, or regulatory compliance. Prior experience helping scale or document a compliance program is a plus.
• Certifications: Certified Internal Auditor (CIA), Certified Financial Services Auditor (CFSA), Certified Fraud Examiner (CFE), or progress toward a Credit Union Compliance Expert (CUCE) designation preferred.
• Technical Skills: Proficiency with credit union core data systems (e.g., Symitar), automated general ledgers, and data extraction/analytics tools.