Internal Audit Manager

Internal Audit Manager

Department: Internal Audit

Reports To: Chief Credit and Risk Officer (CCRO) (Administrative) / Supervisory Committee Chair (Functional)

Formed in 1934, Telhio began as a credit union for Columbus Telephone Company (now AT&T) employees. Telhio now serves over 70,000 member-owners throughout central and southwest Ohio. As one of the largest credit unions in Ohio, Telhio is a strong financial institution that continues to serve its members through extraordinary service, innovative financial solutions and community involvement. After generations of service and growth, we never lose focus of our three core values - Caring, Commitment, and Integrity.

Summary:

The Internal Audit Manager leads the credit union's Internal Audit program, leveraging both internal resources and an external audit provider to deliver a comprehensive, risk‑based audit plan. This role is responsible for enhancing, managing, and maturing the Internal Audit function-developing the audit universe and risk assessment, creating and maintaining Internal Audit methodology and quality practices, coordinating and monitoring audit execution, and reporting results to the Supervisory Committee and executive leadership. The Internal Audit Manager works in partnership with the Chief Credit and Risk Officer (administrative reporting) and business leaders, while maintaining independence and objectivity and performing select internal audits directly as needed.

This role ensures Internal Audit maintains independence, follows the International Standards for the Professional Practice of Internal Auditing (IIA Standards), and provides high‑quality, objective assurance to the Supervisory Committee and executive leadership.

Responsibilities:

1. Leadership of a Co‑Sourced Internal Audit Model

• Oversee a hybrid audit delivery model combining internal audit work with outsourced specialty audits (e.g., IT/cybersecurity, BSA/AML, model risk, ALM).
• Manage relationships, contracts/SLAs, and performance expectations (KPIs) for the external audit provider, including independence and confidentiality requirements.
• Allocate work between internal and external resources based on complexity, risk, and required expertise.

2. Internal Audit Planning & Risk Assessment

• Lead the annual enterprise‑wide risk assessment process in collaboration with the CCRO and business leaders.
• Develop a risk‑based Internal Audit Plan that includes both internal audits and outsourced audit engagements and provides appropriate coverage across key risk areas (e.g., lending, deposits, payments, financial reporting, IT/cybersecurity, BSA/AML, third‑party risk, and governance/enterprise risk management).
• Present the annual plan to the Supervisory Committee for approval and conduct mid‑year refreshes as appropriate.

3. Execution of Select Internal Audits

• Perform select internal audits (as capacity and risk dictate), including planning, limited fieldwork/testing, documentation, and reporting, in accordance with IIA Standards.

• Conduct targeted reviews in areas such as (examples):

• Operational processes

• Consumer compliance (as appropriate)

• Payments and branch operations

• Governance, risk management, and internal control frameworks

• Identify control gaps, evaluate root causes, and recommend actionable improvements; coordinate management responses and due dates for tracked issues.

4. Oversight of Outsourced Audit Work

• Review and challenge external providers' audit scopes, methodologies, and timelines.
• Evaluate the accuracy, completeness, and quality of outsourced audit reports.
• Ensure outsourced audits are delivered on time, within budget, and in accordance with IIA Standards.
• Maintain independence by ensuring no conflicts of interest with third‑party providers.

5. Audit Reporting & Communication

• Prepare clear, concise audit reports summarizing findings, risks, and recommendations for management and the Supervisory Committee.

• Deliver quarterly Internal Audit updates to the Supervisory Committee, including:

• Status of the audit plan

• Significant findings

• Issue aging

• Emerging risk themes

• Support executive sessions between external auditors and the Supervisory Committee.

6. Issue Management & Validation

• Partner with the Risk Team to track management action plans for all internal and external audit findings.
• Verify that remediation is complete, evidence is adequate, and sustainable improvements are in place.
• Coordinate with the outsourced audit provider for independent validation of completed actions.

7. Regulatory Exam Support

• Serve as the primary point of contact for regulators (NCUA, state agencies) regarding internal audit matters.
• Provide requested reports, documentation, and evidence of issue remediation.
• Implement enhancements resulting from exam recommendations.

8. Internal Audit Governance & Quality Assurance

• Establish and maintain the Internal Audit universe, risk assessment methodology, and annual planning cadence appropriate for a growing credit union.
• Develop, document, and maintain Internal Audit methodology (e.g., audit programs, workpaper standards, report format/rating taxonomy, sampling and testing guidance) and ensure consistent application across internal and third‑party resources.
• Implement and maintain tools and routines to manage the audit lifecycle (plan tracking, workpaper retention, issue tracking, and reporting metrics such as plan completion, issue aging, and remediation effectiveness).
• Maintain and annually update the Internal Audit Charter.
• Ensure the Internal Audit function operates in alignment with IIA Standards and current best practices.
• Coordinate periodic external quality assessments as required (typically every 5 years).

Required Qualifications

• Bachelor''s degree Finance, Accounting, Business, Information Systems or related field (Required)
• 7+ years - Experience internal audit, external audit, or related risk/control roles, including responsibility for audit planning, reporting, and stakeholder management demonstrated leadership experience. (Required)
• 1-3 years - Experience in a financial institution setting. (Preferred)
• 1-3 years - Experience leading audits or overseeing outsourced audit partners (Preferred)

Certifications (Preferred)

• CIA - Certified Internal Auditor
• CPA - Certified Public Accountant
• CISA - Certified Information Systems Auditor
• CAMS or CRCM a plus (especially helpful for specialty audits or BSA oversight)

Knowledge, Skills and Abilities:

• Strong knowledge of internal controls and auditing techniques.
• Familiarity with NCUA, FFIEC, and consumer compliance regulatory expectations.
• Ability to perform select audits independently and to oversee and review co‑sourced/outsourced work with professional skepticism.
• Excellent communication skills, with the ability to present clearly to executives and the Board.
• Strong problem‑solving, analytical, and project‑management abilities.

What you will earn:

• Competitive pay
• Benefits: medical, dental, vision, life and disability insurance
• 6% matching and immediately vested 401(k) plan
• Paid holidays, vacation and personal time
• Opportunity for personal career growth, continued education and mentorship programs
• Volunteer opportunities impacting the local community

Physical Demands

The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

While performing the duties of this job, you will need to have good manual dexterity as well as speaking and hearing ability. This position requires sitting; some reaching; standing; some stooping or kneeling. The employee must occasionally lift and move up to 50 pounds. It is expected that the employee will read, compile, compute and record numerical and statistical data. Must drive occasionally.

This is a Non-Collective Bargaining Unit

Telhio is an Equal Opportunity Employer