Vp/It Audit Manager

Description of Work:   

The IT Audit Manager is responsible for managing the information systems audits within the Bank to independently and objectively identify and assess risks, evaluate controls, and assess compliance with laws, regulations, and established Bank policies and practices.

            Supervision Received:  Report to the Chief Audit Officer ("CAO")

Major Duties and Responsibilities:

• Assist the CAO in managing and scheduling the performance of the detailed IT audit testwork, including any additional steps considered necessary to improve the quality of the work to be performed. 
• Perform reviews of internal control procedures and security for information systems which include, but are not limited to, operating procedures, system security, communication controls, backup and disaster recovery, system maintenance and third party application controls.
• Maintain Sarbanes-Oxley IT general controls and application controls narratives, control matrixes and perform annual testing and report results.
• Prepare workpapers ensuring that adequate documentation exists to support the completed audit and conclusions. Prepare audit reports detailing findings and recommendations. Present irregularities or exceptions to the CAO prior to submission to the appropriate Department Head.  Discuss areas of concern and reach an agreement on management's commitments and corrective measures to be taken.  Follow-up on outstanding issues until appropriate corrective action is taken. 
• Assist in the performance of the annual IT Risk Assessment and development of the Annual IT Audit Plan.   
• Assist the CAO in coordinating IT regulatory examination and external auditor requests and follow-up.
• Maintain the necessary knowledge, skills and disciplines to ensure compliance with the Bank's IT/IS policies and procedures and applicable laws and regulations in order to successfully implement the audit program in a proficient and professional manner. 
• Stay abreast of business, technology and organizational changes.  Analyze changes in risks to the Bank, including changes in regulatory requirements and expectations of the regulatory agencies such as the NYS DFS and FDIC.
• Support the automated workpaper system.
• Participate on Bank projects/committees representing Internal Audit.

Non-Essential Responsibilities:

            Perform other related functions as assigned by manager.

Minimum Qualifications:

• Bachelor's degree with business emphasis in a related field.
• Minimum of 6 to 10 years of IT audit experience, preferably in a banking environment.
• Thorough knowledge of operations and control systems as well as an understanding of best-in-class audit methodologies.
• Proficient in risk and control analysis and audit concepts and familiarity with the COSO and COBIT internal control frameworks.
• Excellent oral and written communication skills.
• A Certified Information Systems Auditor (CISA), a Certified Internal Auditor (CIA) or Certified Information Security Manager (CISM) designation is preferred.

Knowledge, Skills and Abilities:

• Excellent analytical and research skills.
• Effective negotiation skills, a proactive and 'no surprises' approach in communicating issues and strength in sustaining independent views.
• Strong time management skills and the ability to multi-task and remain organized.

• Experience in Windows/Active Directory/Virtual Desktops.
• Working knowledge of information security policies and standards, including business continuity programs, cloud computing, cybersecurity regulatory framework and vendor management practices.
• Network/outsourced application security.
• Database administration/security.
• Data communication.
• Experience in audit tools, i.e. network security, firewall, IDS.
• Knowledge of applicable regulations and standards governing the IT segment of the Bank.

Pay Range: $125,000 - $150,000

Hours: 37.50

This is an exempt position.

The actual compensation will be based on qualifications, experience and other factors permitted by law.

EOE, including Disabled and Veterans