Job Information
Happy State Bank - a division of Centennial Bank Sr Internal Auditor - IT in Amarillo, Texas
The Sr Internal Auditor - IT will plan and conduct independent audit and consulting engagements of the organization's key IT systems, processes, controls, and technical infrastructure.Planned engagements will result in assessments to determine the adequacy and effectiveness of internal controls and compliance with existing bank policies, procedures, regulatory requirements, and industry best practice as stated in applicable frameworks. The IT Audit engagements focus on the IT risk, controls, and governance that support the bank's key financial and operational data processing.This includes FFIEC IT guidelines and leading the annual IT General Controls audits that support Sarbanes-Oxley.General audit areas include, but are not limited to, Operating system security, Database Management Systems, Network security, IT General Controls such as Change Management and User Access, Disaster Recovery, and key application controls.This employee will work directly with external IT auditors as needed, coordinating work with internal audit and as a liaison for the bank. This position will also supervise the work of staff IT auditors.
ESSENTIAL DUTIES AND RESPONSIBILITIES
Perform Sarbanes-Oxley (SOX) IT audit planning: review and update narratives, risk matrices, and test matrices as assigned. This duty is performed annually, about 5% of the time.
Perform audit tests for IT SOX processes as assigned. Report findings to appropriate parties, obtain management responses and prepare audit reports. This duty is performed as needed, about 20% of the time.
Plan and perform FFIEC information technology audits. Report findings to appropriate parties, obtain management responses and prepare audit reports. This duty is performed as needed, about 15% of the time.
Perform annual audit risk assessment of IT environment and process. Develop audit plan based on risk assessment. This duty is performed annually, about 5% of the time.
Plan and perform Technical Infrastructure audits (OS, DBMS, Network Security).Report findings to appropriate parties, obtain management responses and prepare audit report. This duty is performed annually, about 8% of the time.
Prepare information for federal and state IT examiners as requested, including providing our audit workpapers for their reliance, and function as liaison with the examiners for the audit department. This duty is performed annually, about 12% of the time.
Work with external IT auditors as a liaison for the audit department, reviewing engagement scope and providing IT Audit workpapers for reliance of SOX IT controls testing. This duty is performed annually, about 5% of the time.
Supervise work of Staff IT Internal Auditor and perform reviews of audit work papers prepared by others in department. This duty is performed as needed, about 20% of the time.
Provide IT controls consulting expertise as IT looks to buy or build key IT products and services.Report findings to appropriate parties and work with management to ensure key IT objectives met without exposing the organization to unnecessary risks. This duty is performed annually, about 10% of the time.
Obtain 40 hours of continuing education in audit, IT, or specific industry knowledge. This duty is performed annually.
The ability to work in a constant state of alertness and in a safe manner. This duty is performed as needed.
Completes required BSA/AML training and other compliance training as assigned. This duty is performed as needed.
Perform any other related duties as required or assigned.
QUALIFICATIONS
To perform this job successfully, an individual must be able to perform each essential duty mentioned satisfactorily.The requirements listed below are representative of the knowledge, skill, and/or ability required.
EDUCATION AND EXPERIENCE
Technical degree required in such disciplines as Computer Engineering, CPA,etc, plus 6 years related experience and/or training, and 19 to 23 months related management experience, or equivalent combination of education and experience.
COMMUNICATION SKILLS
Ability to read a limited number of words and recognize similarities and differences between words and between series of numbers; Ability to write and speak simple sentences as a means for basic communication. Ability to read and understand simple instructions, short correspondence, notes, letters and memos; Ability to write simple correspondence. Ability to read and understand documents such as policy manuals, safety rules, operating and maintenance instructions, and procedure manuals; Ability to write routine reports and correspondence. Ability to effectively communicate information and respond to questions in person-to-person and small group situations with customers, clients, general public and other employees of the organization. Ability to read, analyze, and understand general business/company related articles and professional journals; Ability to speak effectively before groups of customers or employees. Ability to write reports, business correspondence, and policy/proceduremanuals;Abilityto effectively present information and respond to questions from groups of managers, clients, customers, and the general public. Ability to read, analyze, and understand common scientific and technical journals, financial reports, and legal documents; Ability to respond to complex or difficult inquiries or complaints from customers, regulatory agencies, or members of the business community.
MATHEMATICAL SKILLS
Ability to calculate figures and amounts such as discounts, interest, commissions, proportions, percentages, area, circumference, and volume. Ability to apply concepts such as fractions, ratios, and proportions to practical situations.
CRITICAL THINKING SKILLS
Ability to define problems, collect data, establish facts, and draw valid conclusions. Ability to interpret an extensive variety of technical instructions in mathematical or diagram form and deal with several abstract and concrete variables.
REQUIRED CERTIFICATES, LICENSES, REGISTRATIONS
Not indicated.
PREFERRED CERTIFICATES, LICENSES, REGISTRATIONS
CISA or similar IT Audit, Security, or Governance certification is preferred.
SOFTWARE SKILLS REQUIRED
Advanced: Word Processing/Typing
Intermediate: 10-Key, Accounting, Database, Human Resources Systems, Other, Spreadsheet
Basic: Payroll Systems, Programming Languages
WORKING CONDITIONS
Periodically exposed to such elements as noise, intermittent standing, walking, occasionally pushing, carrying, or lifting; but none are present to the extent of being disagreeable.
ENVIRONMENTAL CONDITIONS
The following work environment characteristics described here are representative of those an employee encounters while performing essential functions of this job.Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.
The noise level in the work environment is usually moderate.
PHYSICAL ACTIVITIES
The following physical activities described here are representative of those that must be met by an employee to successfully perform the essential functions of this job.Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions and expectations
Semi-repetitive, low physical. Semi-repetitive type work which requires periods of concentration for varied time cycles as prescribed by the tasks.
While performing the functions of this job, the employee is continuously required to sit, talk or hear; occasionally required to st
