A global financial institution is seeking a Cybersecurity Audit Associate to support audit coverage across information security, cyber risk, and technology control environments. This role will execute cybersecurity audits, assess technology risks and controls, perform issue validation and continuous monitoring activities, and partner with stakeholders across technology, risk, compliance, and audit functions.
The position offers exposure to a complex banking environment with evolving cybersecurity and regulatory requirements.
RESPONSIBILITIES
Execute audits covering cybersecurity, information security, and technology risk management programs
Assess the design and operating effectiveness of controls across cybersecurity domains including identity and access management, vulnerability management, threat detection, incident response, and cyber governance
Develop audit findings, recommendations, and reports for audit leadership and business stakeholders
Track and validate remediation of audit, regulatory, external audit, and self-identified issues
Perform continuous monitoring activities and support ongoing cybersecurity risk assessments
Partner with technology, compliance, legal, information security, and risk management teams to evaluate control effectiveness and emerging risks
Assess compliance with cybersecurity regulatory requirements and industry standards
Support audit planning activities and identify opportunities to enhance audit coverage and methodologies
Maintain audit documentation and workpapers in accordance with professional standards and internal audit requirements
Stay current on evolving cybersecurity threats, regulatory developments, and industry best practices
QUALIFICATIONS
Bachelor s degree in Information Technology, Information Systems, Cybersecurity, Computer Science, Finance, or related field
2+ years of cybersecurity audit, information security audit, cyber risk, or technology audit experience within a financial services or technology organization
Experience assessing cybersecurity controls, technology risks, and security governance frameworks
Knowledge of cybersecurity domains including Identity & Access Management (IAM), Vulnerability Management, Security Operations, Incident Response, and Third-Party Risk
Familiarity with cybersecurity frameworks and regulatory standards such as NIST, FFIEC, NYS DFS 500, CIS Controls, or similar frameworks
Understanding of audit methodology, risk assessment, internal controls testing, and issue remediation processes
Strong analytical, communication, and stakeholder management skills
Ability to execute audits independently from planning through reporting and issue validation
Experience working within banking, financial services, fintech, or technology environments preferred
Professional certifications such as CISA, CISSP, CISM, CRISC, CIA, or related credentials are a plus