Senior IT Auditor

Summary: The Senior Information Technology (IT) Auditor will report to and assist the IT Assistant Audit Manager in the performance of audits relating primarily to Dime's information technology environment including business process automation, cybersecurity, third-party governance, SOX ITGC etc.

Salary commensurate with experience, ranging from $85,000 to $105,000 annually. The exact compensation may vary based on relevant experience, skills, education, training, licensure and certifications, and location.

All applicants need to attach a recent resume. This role can be remote or hybrid.

Responsibilities:

• Support IT Assistant Audit Manager in the execution of the risk assessment, scoping, and planning of IT coverage in Technology and Integrated Audits in accordance with IIA's International Standards for the Professional Practice of Internal Auditing.

• Research and prepare meeting agendas for discussions with IT Operations Managers, IT Network Admins, Information Security, or business unit stakeholders and document end-to- end business processes, risks, and technology controls using flowcharts or narratives.

• Apply current knowledge of technology and cybersecurity trends and systems processes to identify security and risk management opportunities for improvement.

• Identify risks, determine control objectives, identify control procedures that address those objectives, and assess the adequacy of those procedures.

• Create document request lists, gather evidence, and perform audit testing. Document test results in accordance with audit methodology and in a clear and concise manner.

• Assist IT Assistant Audit Manager in drafting audit reports following completion of fieldwork portion of reviews to reflect facts, observations, risks, and recommendations in a concise and accurate manner.

• Provide support in annual SOX assessment of ITGCs through documentation and testing of IT applications and related controls.

• Aid in the development and application of data analytic routines to assist in the performance of audit procedures.

• Proactively interact with other auditors to gather requirements, obtain corroborative information, and make recommendations as needed.

• Other duties as assigned.

Qualifications:

• Bachelor's degree required in information technology, management information systems, internal controls, business, or any degree which promotes analytical thinking or specific knowledge.

• Minimum three years' related work experience in banking industry or professional services firm where clients included organizations in Financial Services industry.

• CISA preferred. Ability to obtain certification required.

• Excellent communication skills and ability to effectively lead a discussion or meeting and take minutes.

• Excellent oral and written communication skills, specifically business/report writing.

• Ability to observe and understand business processes ensuring processes are documented completely and accurately.

• Ability to follow instructions accurately and efficiently; proactive in asking clarifying questions to ensure work effort is directed toward desired outcome.

• Strong project management, time management, and prioritization skills.

• Strong work ethic with self-accountability for high quality deliverables and achieving departmental goals.

• Experience auditing any of the following is a plus "DMZ, Network Security, Data Loss Prevention, Privileged Access Management, Data Lakes, Vendor Risk Management, Internet banking, core banking systems or lending systems."

• Working knowledge of Sarbanes-Oxley Section 404, FFIEC IT Handbook and Cybersecurity Assessment Tool, NIST Cybersecurity Framework and NY DFS 23 NYCRR 500 (Cybersecurity Requirements for Financial Services Companies) preferred.

• Advanced Microsoft Office and SQL skills preferred.