Internal Audit Consultant – Cybersecurity

Overview:

This role provides senior level expertise in audit engagements that span multiple portfolios which require in-depth business and risk knowledge to properly assess associated risk and controls.

Primary Responsibilities:

Successful Audit Plan Completion

• Stay abreast of best practices, industry developments, and changing or emerging risks and consult with the audit teams to ensure their coverage as appropriate in assigned audits.

• Participate in the execution of audit procedures, particularly those which are highly visible and complex in nature, in a risk-focused manner while maintaining independence and adhering to department and professional industry standards.

• Analyze audit findings, particularly those that require complex judgment or sophisticated analytical thought, and propose creative and pragmatic solutions to the audit team for consideration in the final audit report.

• Drive audit teams in the planning and execution of validation procedures for Internal Audit and Regulatory issues that require subject matter expertise.

• Organize and complete work within established budgets and time frames with minimal direction from audit management.

• Incorporate the use of data analytics throughout all phases of the audit process.

• Inform and clearly demonstrate support for the department’s strategic objectives.

Leadership, Decision Making, and Communication

• Possess strong management and interpersonal skills, make sound decisions independently, exhibiting initiative and intuitive thinking.

• Proactively communicate with senior management members of the audit team and line of business senior and executive regarding the status of audits and potential issues identified.

• Build strong partnerships with business stakeholders and audit team members.

• Demonstrates strong judgment, political astuteness, and sensitivity to cultural commitment..

Developing Others

• Coach and mentor junior audit team members through knowledge sharing, tailoring the approach based upon their skills and experience.

Other Responsibilities

• Adhere to applicable compliance/operational risk controls in accordance with Company or regulatory standards and policies.
• Maintain internal control standards, including timely implementation of internal and external audit points together with any issues raised by external regulators, as applicable.

• Complete other related duties as assigned.

Scope of Responsibilities:

• This role operates independently within a matrix reporting environment and is responsible for the timely delivery of high quality, value-added audit reports for a variety of business activities (complex in nature), which meet the requirements of the Audit Committee and regulatory expectations.  Ensures ongoing conformance with professional auditing standards.

• This position directly communicates with Senior, Middle and Line Management and External Auditors.  Builds strong partnerships with business stakeholders and other audit team members.

• This role also requires periodic interaction with external regulatory agencies.

Supervisory/ Managerial Responsibilities:

• May provide coaching opportunities for certain audit professionals but is not responsible for performance management, compensation planning, or other similar duties.

Education and Experience Required:

• Bachelor’s degree, preferably in Technology, Cybersecurity, Mathematics, Statistics or other related technical field and 7 years of relevant IT Audit experience, inclusive of 2 years of work leadership experience. In lieu of degree, a combined minimum of 11 years higher education and/or work experience including 7 years of relevant IT Audit experience and 2 years of work leadership experience.

• Demonstrates strong judgment, political astuteness, and sensitivity to cultural commitment..

• Possesses strong project management and interpersonal skills, makes sound decisions, exhibiting initiative and critical thinking.

• Specific subject matter expertise regarding internal audit disciplines or in one or more of the following Lines of Businesses (LOBs) such as Commercial Banking, Retail Banking, Mortgage, Consumer Banking, Wealth Advisory, Institutional Client Services, or support functions such as Treasury, Finance, Compliance, Technology, Operations, Risk Management, or Credit Administration.

Education and Experience Preferred:

• MBA or Master’s degree in an appropriate field preferred (Cybersecurity, Information Management, Information Systems etc. )

• Related certifications (CISA , CISSP or similar).

• Financial Services Industry experience preferred.