IT Audit Manager

Take the next step toward your new career today!

Become a part of the diverse and inclusive team within our nationally recognized award-winning Bank that is one of the strongest in the nation. Woodforest National Bank is privately owned, and our Employee Stock Ownership Plan is the largest shareholder. We focus on building relationships and discovering opportunities to better serve our communities and understand the financial needs of every customer we serve. At Woodforest we care and prove it by volunteering with local charities and foodbanks to give back to the communities we serve. By joining Woodforest you will become a part of one of the largest employee-owned banks in the country!

The IT Audit Manager serves as a technical subject matter expert within Internal Audit and is responsible for developing, planning, and executing medium to complex risk-based audits. The audits primarily focus on the organization’s technology environment, including infrastructure, network architecture, cloud computing, information security, cybersecurity, data governance, IT operations, and emerging technology risks. This role partners closely with technology leadership while maintaining independence, providing strategic insight regarding control effectiveness, regulatory expectations, emerging threats, and industry best practices. In addition, the IT Audit Manager supports advancement of the Internal Audit function through the development of technical audit methodologies, risk assessments, data analytics capabilities, and continuous auditing solutions.

Key Responsibilities:
· Completes medium to complex IT process or application audits from beginning to end with limited guidance. This would include conducting walkthroughs, creating the audit risk assessment and scope; developing, executing, and documenting the audit testing plan; discussing results with Management, drafting audit reports, and tracking audit issues to completion. 
· Assists with reviewing workpapers and driving the completion of the annual IT audit plan. 
· Represents Internal Audit on various IT projects and initiatives, including the participation in risk assessments.
· Serves as a department resource for questions and guidance on technical matters; extracts and provides data to auditors for analysis.
· Participates and assists with the annual risk assessment and development of annual audit schedule

Competencies Required:
· Strong working knowledge of auditing standards and internal control frameworks. 
· Excellent written and verbal communication, interviewing, and presentation skills.
· Inquisitive, critical thinker with business risk awareness, professional skepticism, and sound judgment.
· Ability to effectively interact with and respond to common inquiries from executive management, regulatory agencies, and/or outside consultants.
· Extensive knowledge of IT practices, vulnerability assessment, change control, business continuity, data privacy and risk assessment practices.
· Exposure to a variety of IT areas such as operating systems, databases, platforms, network hardware and software, security tools, cloud services, data mining tools, and common software/applications.
· Stays abreast of emerging technologies and trends within the IT and cybersecurity landscapes and learns new skills quickly.
· Strong project management and organization skills with high attention to detail.
· Ability to research, assimilate information, apply strong problem solving and analytical skills, and influence issue resolution.
· Ability to manage multiple responsibilities and projects in a fast-paced environment with competing priorities and deadlines.
· Strong leadership and interpersonal skills; ability to work cooperatively and collaboratively with all levels of employees with skills to build consensus across diverse teams and achieve results through the effort of others.
 

Minimum Qualifications/Experience:
· 6+ years’ experience in IT auditing or an information technology role with demonstrated exposure to internal controls and/or risk assessment practices required.
· 2+ years’ experience in leading complex IT projects or IT audits 
· Must be able to easily learn how to manage medium-to-complex IT process or application audits from beginning to end with limited guidance.
· Banking or financial services industry experience preferred.
· Ability to read or write queries and other working knowledge of programming tools are preferred.
· Strong technical background in cyber security, information security, cloud engineering or infrastructure preferred. 
Formal Education & Certification:
· Bachelor’s Degree in Information Systems, Computer Science, or related field preferred. 
· Industry recognized certification such as Certified Information Systems Auditor (CISA) or Certified Information Systems Security Professional (CISSP) preferred.

Work Status:
· Full-Time.

Supervisory Responsibility:
· Varies, depending on the audit.

Travel:
· Less than 5%25 travel expected.

Working Conditions:
· Conditions involve lifting no more than ten pounds, sitting most of the time, but may involve walking, moving, or standing for brief periods, and occasionally lifting and carrying articles like files, ledgers, folders, etc.

Disclaimer:
This job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee. Nothing herein restricts management’s right to assign or reassign duties and responsibilities to this job at any time.

Woodforest is an Equal Opportunity Employer, including Disability and Veterans.