Staff Auditor - Cybersecurity

As a dedicated Staff Auditor you'll perform technology and information/cyber security (IT/IS) audit assignments. This role identifies problems for resolution in support of risk-based assurance and advisory engagements across the IT/IS organization. Applies learning knowledge of large financial services regulations to audit assignments. Performs IT/IS risk and control identification and evaluation, increasingly complex audit techniques, research, and analysis, and conducts client meetings and interviews. Adheres to the Institute of Internal Auditors' International Standards for the Professional Practice of Internal Auditing (Standards) and Code of Ethics. This role may travel up to 20%. We offer a flexible work environment that requires an individual to be in the office 4 days per week. This position can be based in one of the following locations: San Antonio, TX, Plano, TX, or Charlotte, NC. Relocation assistance is not available for this position. Responsibilities include independently performing IT/IS audit program assignments timely and expertly; aligning with Auditor-in-Charge (AIC) to complete the annual audit plan and audit priorities for assigned area; independently and accurately testing less complex IT/IS applications, and/or IT general controls (ITGC) and documenting results; identifying IT/IS control deficiencies in testing, discussing with IT/IS Auditor-in-Charge (AIC) and/or Audit management and establishing understanding on how to for assigned work; reviewing, analyzing, and interpreting data collected from multiple sources to ensure valid conclusions are drawn during testing; attending and participating in team audit activities such as planning and scoping for the IT/IS business; completing audit documentation techniques including IT/IS key risks and controls alignment to audit test objectives and conclusions; communicating effectively and sharing findings with AIC, team members, and may present to IT/IS business leaders; providing updates to the engagement level risk & control matrix and other audit documentation as deemed appropriate by AIC or team leadership. Requirements include a Bachelor's degree or 4 additional years of related experience beyond minimum required may be substituted in lieu of a degree; 2 years of audit experience in a financial services or technology/security environment; experience applying audit, risk, or compliance acumen in a business/professional environment; experience effectively communicating Controls with business partners; experience utilizing Microsoft Office products to complete work assignments; ability to independently follow and work through business Audit plans; knowledge of documenting auditing techniques and assessments; knowledge of financial services regulations (e.g., Office of the Comptroller of Currency’s Heightened Standards); basic knowledge of IT general controls, Technology infrastructure management and platforms (e.g., mainframe, midrange, distributed), and Network architecture and security (e.g., network segmentation, firewalls, proxies, encryption protocols, endpoint protection). Preferred qualifications include demonstrated basic knowledge and skills in the specialized field of IT auditing including, but not limited to, IT general controls, Cloud computing, Cyber incident management, etc.