Purpose: The Senior Information Technology Auditor leads the planning and execution of audits that evaluate the adequacy and effectiveness of critical technology and information security functions including data management, cybersecurity, vendor/cloud-based technology solutions, and IT general controls. Audits of financial and operational control activities are also performed as assigned. Audit coverage includes Sarbanes – Oxley Section (SOX) 404 key control testing. Risk assessments are performed of business activities with relevant testing performed based on the risks and processes associated with the area audited. The Senior Information Technology Auditor develops and utilizes analytics software and automation to assist in audits. The Senior Information Technology Auditor also acts as a mentor to others.

Essential Functions:

By leveraging available data and analytical tools and utilizing and interpreting various audit, accounting and regulatory compliance reference resources and other relevant sources, develops the scope of assigned internal audits and SOX 404 testing, selects and develops appropriate audit procedures for work programs to achieve audit objectives within hours budgeted. Discusses and reviews work programs with department supervisory staff and/or others assigned to the audit prior to commencing test work to maintain consistent, effective audit coverage. Recommends changes and improvements to established work programs and audit testing approaches as appropriate.
Evaluates the design and operating effectiveness of the system of internal controls, adherence to established policies and procedures, and regulatory guidance and conducts test work as outlined in the audit work program. Utilizes judgment as to expansion of scope, further test work needed based on trends or exceptions identified. Prepares work paper documentation via software applications to support test work performed and conclusions reached. Explains, clarifies or corrects documentation to clear any review notes generated by the department supervisory staff or audit lead personnel’s review of the work papers, conclusions and recommendations.
Provides information and supporting documentation for all issues uncovered as a result of the audit to prepare preliminary exit sheets, which detail the level of risk, and proposed solutions to correct the existing issue, prevent future occurrences and add value to the organization. Leads exit meetings with management and other Internal Audit department supervisory staff to discuss proposed recommendations to come to agreeable solutions. Prepares written audit reports to summarize the audit scope, control findings, recommendations and management commitments.
Proactively seeks out learning opportunities to enhance skills and competencies related to role.
Manages/works with outsourced technology audit engagements and works with external auditors to ensure IT financial reporting control audit requirements are fulfilled. As assigned, manages financial and operational audit engagements and works with external auditors to ensure financial reporting control audit requirements are fulfilled.
Assists in mentoring and training audit staff.
Is a contributing member of project teams as assigned. Provides consulting services to management in developing appropriate internal controls for new products and/or processes as well as enhancements to existing products and/or processes.
Demonstrate the standards and principles of the Five Star Bank experience in every interaction with internal and external customers, associates, and stakeholders. Incorporate the high-performance behaviors of teamwork, leading by example, and service in every facet of work.

Job Related Qualifications:

Required:

Education: Bachelor’s Degree in Information Systems, Information Technology, Data Management / Analytics, Accounting, Auditing, Finance, or related field
Prior Experience: 5+ years of experience in information systems auditing, in information systems risk management, or a combination and 4+ years of IT Sarbanes Oxley (SOX) testing experience, e.g., key reports, automated controls, IT general and application controls. Exposure to relevant industry frameworks (e.g., FFIEC IT Handbooks, NIST cyber security framework, CRI, CAT, etc.).
Licenses or Accreditation: One or more of the following:
- Certified Internal Auditor (CIA)
- Certified Information Systems Auditor (CISA)
- Certified Information Security Manager (CISM)
- Certified in Risk and Information Systems Control (CRISC)

Competencies:

Able to effectively coach, mentor and develop staff in areas of expertise.
Self-starter, able to work independently and ensure work is completed to schedule and meets our high-quality standards.
Able to adapt to change, embrace bold ideas, test assumptions, and challenge conventional thinking.
High level of attention to detail with the ability to follow detailed procedures and ensure accuracy.
Develop and maintain strong and effective working relationships with key business partners to deliver outstanding business impact and elevate Audit's value proposition.
Demonstrate teamwork, collaboration, a positive attitude, and a high level of ethics.
Possess a high level of understanding of audit theory and ability to develop strong industry knowledge.
Intermediate level with all Microsoft Office applications including the ability to learn new and existing software.
Able to handle company and client information and sensitive matters professionally and confidentially.
Excellent organizational skills with the ability to manage multiple priorities and meet established deadlines.
Excellent verbal and written communication skills.

Physical Requirements:

Able to regularly sit for prolonged periods of time.
Able to regularly stand for prolonged periods of time.
Able to travel:
occasionally
Extensive computer usage is required.
Ability to work:
Evenings
1. Occasionally
Weekends
1. Occasionally

Benefits:

Medical, Dental, and Vision Insurance
Health Savings Account
Flexible Spending Account(s)
Company Paid Life Insurance, Long-Term Disability, and Short-Term Disability
Voluntary Offerings: Life, Critical Illness/Specified Disease, Accident, Hospital Indemnity, Legal Insurance & Personal Accident
Tuition Reimbursement
Employee Referral Program
Wellness Reimbursement Program
Star Volunteer Program
Employee Banking and Financial Perks
Flexible Hybrid Work Schedule
Paid Time Off (PTO)
Company Paid Holidays

This job description is not exhaustive. The Senior Information Technology Auditor may be required to perform other duties as assigned.

The expected rate of pay for this position is shown above. Compensation offers are based on a wide range of factors including relevant skills, training, experience, education and, where applicable, licenses or certifications obtained. Market and organizational factors are also considered. In addition to your base rate of pay and a competitive benefits package, successful candidates may be eligible to receive cash or equity-based incentives based on the role and performance.