Senior Information Technology Auditor

Job Title: Senior IT Auditor

Job Location: Boston, MA (financial district)Hybrid scheduleIndustry: Asset Management firm with 150 employees and manage just under a Trillion in assets under management.

Why Open: Newly created position

Required:3+ years of IT audit experience (ideally closer to 5+)CIA, CISA or CISM certification (or working towards at least one of them)

Pluses:Financial service/investment industry experience

Senior Technology Auditor to become an integral member of the Internal Audit team. The Sr. Technology Auditor will be responsible for the execution of technology audits and assisting in operational audits in accordance with the internal audit plan. This role reports to the Director of Technology Audit.

Responsibilities:Analyze business process, procedures, and risks and evaluate internal controlsCommunicate effectively with the Technology team and Technology liaisons where applicable to manage expectations and ensure cooperation to achieve objectivesDevelop and execute IT audit programs, testing procedures, and data analysis to evaluate the design and operating effectiveness of controlsIdentify control deficiencies and areas for improvement and provide practical and actionable recommendations to enhance technology controls and processesPrepare detailed reports and discuss results with the auditee and Internal Audit teamComplete assigned engagements and reports within communicated deadlinesMonitor and track the implementation of audit recommendations, following up with stakeholders to ensure timely resolution of identified issuesCollaborate with other auditors, technical specialists, and business stakeholders to understand technology risks and controls across companyKeep up to date with new technologies, regulations, and industry standards to ensure audit procedures remain relevant and effectiveParticipate in ad hoc projects, investigations, and other technology or non-technology related initiatives as assignedSkills You Bring:3-5+ years of experience in IT Audit or information technology with a focus on risk management, system development and/or security Bachelor’s degree Experience in operational audit preferredExperience in assessing emerging technology risks, such as cloud computing, artificial intelligence, and cybersecurityExperience with Linux, SQL, network environments, SSDLC/change management-related processes and controls, cloud migration, code security, and data management a plusUnderstanding of internal control concepts and experience in applying them to plan, perform, manage, and report on the evaluation of various business processes/areas/functionsAware of changes in IT audit practices, regulatory requirements, and IT Risk frameworks (e.g., COBIT, NIST SP 800, NIST CSF, CSC) and their impactKey Competencies:Strong project management and analytical skillsAttention to detail and accuracyPlanning and organizing (deadline-oriented); ability to effectively balance prioritiesAbility to communicate clearly and concisely, both oral and writtenHighly collaborative including with cross-functional teamsInitiative to work individually but also well within a team based environment