Internal Audit's primary purpose is to assist the organization by identifying and evaluating significant exposures to risk and contributing to the improvement of risk management and control systems which mitigate those exposures. The IT Audit Manager, Sr works closely with IT/Risk management to understand products, organizational initiatives and systems, and provide quality audit services which meet department and professional standards. This position fosters awareness of the importance of internal controls to management and reports clearly, concisely, and logically in verbal and written form to effectively highlight gaps and/or deficiencies. This position will also conduct IT audits or reviews as assigned within Internal Audit. Additionally, the IT Audit Manager, Sr, works closely with the SOX team to ensure completion of semi-annual SOX key control testing. The ideal candidate will have audit, SOX, IT, bank, or other relevant experience.
Salary Range
The salary range for this position is $98,400/yr - $199,000/yr plus bonus. The base salary indicated for this position reflects the compensation range applicable to all levels of the role across the United States. Actual salary offers within this range may vary based on a number of factors, including the specific responsibilities of the position, the candidate’s relevant skills and professional experience, educational qualifications, and geographic location.
Key Accountabilities
Planning and Completion of Audit Projects
- Serve as a subject matter expert with advanced organization, technical, and IT knowledge and auditing skills.
- Direct or conduct audits in accordance with the department’s audit methodology and professional standards and ensure audits are completed in a timely manner.
- Review or create work plans including documents such as the Risk Control Assessment, and the creation of audit program steps.
- Oversee testing associated with the field work phase of the audit and ensure technical documents and workpapers satisfy audit program steps and support the results of field work.
- Provide oversight and project supervision to assigned audit staff to ensure the overall quality and reliability of engagement workpapers.
- Review evidence, root cause, and draft of proposed audit observations and recommendations for improvement. In addition, perform follow up work on audit report findings to ascertain that management implemented their corrective action plan timely.
- Oversight and execution of moderate to highly complex internal audits for assigned business segments.
- Review and collaborate on the preparation of audit reports and other outputs intended for audit clients including editing and integrating final work products and reports to support client review and discussion.
- Clearly and concisely present key themes and risks to senior leadership and influence decision-making.
- Update the Internal Audit Risk Assessment upon completion of an audit.
- Lead or influence the annual IT audit risk assessment and identification of emerging IT risks.
Sarbanes-Oxley
- Includes partnership with SOX/ICFR owners and External Audit to align on ITGC scope, testing approach, evidence standards, and reliance strategy
- Semi-annually, evaluate controls that support Sarbanes Oxley requirements including tests of control design and effectiveness regarding applications, databases, and the general computing environment.
- Effectively manages scope, resources, and dependencies to meet firm deadlines without compromising quality.
Special Projects
- Participate in special projects as requested by management. Examples include participating in the annual risk assessment process, assisting external auditors and examiners or attending committee meetings.
- Serve as a trusted risk partner in providing advisory support and effective challenge for new enterprise initiatives.
Key Competencies for Position
Execution Leadership
Establish Plans & Priorities:
- Determines a course of action and establishes a timeframe to complete individual objectives and team goals.
Problem Solving:
- Identifies the root cause of the issue by consulting with lines of business and subject matter experts. Demonstrates strong analytical and technical skills while working towards the ability to manage complex tasks.
Drive and Execution:
- Self-motivated and takes initiative; proactively learns new skills and develops self for current performance and future growth; demonstrates a desire to learn and actively seeks ways to improve current methods, systems, processes, and procedures.
Culture Leadership
Communication:
- Exhibits strong communication skills with the ability to clearly articulate and convey information and ideas to all levels of the organization.
- Demonstrates an understanding of who will be affected by an issue or change and ensures all stakeholders are kept informed.
Collaboration:
- Actively seeks, develops, and maintains trusted relationships with others in the department and external to the department to achieve corporate business goals and objectives.
- Effectively identifies solutions by engaging different ideas, perspectives, and line of business expertise when analyzing a situation or developing a solution.
- Provides knowledge, information, ideas, and suggestions to accomplish mutual goals within the department and those external to the department.
Qualifications and Education Requirements
- Bachelor’s Degree in Information Technology, Computer Science, or relevant business-related field
- One or more IT certifications (CISA, CISSP, CISM, etc.)
- Strong organizational, analytical, oral and written communication skills
- Deep understanding of operational and technical information systems concepts and controls including network infrastructure, computer operating systems, database management systems, SDLC, change management, IT governance and complex computer applications.
- Minimum of ten (10) years of IT audit or relevant business experience
- Ability to work within strict deadlines
- Public Accounting, Regulatory and/or external audit experience is a plus
- Banking experience is a plus
- Experience using Optro (AuditBoard) is a plus
We do not accept resumes from external staffing agencies or independent recruiters for any of our openings unless we have an agreement signed by the Director of Talent Acquisition, SVP, to fill a specific position.
Our culture is firmly rooted in our core values.
We are optimistic. We are collaborative. We are inclusive. We are agile. We are ethical.
We are Old National Bank. Join our team!