Perform audits of technology systems and data supporting BSA/AML, Economic Sanctions, and Fraud related processes.
Responsible for conducting relevant technology testing (e.g., key automated business controls), IT general controls, data management controls, and other IT controls as indicated in COBIT.
Leverage available data and analytical tools during the planning, fieldwork, and reporting phases of audit delivery.
Communicate the results of audit projects to management (written reports/oral presentations).
Establish and build working relationships with internal and external management.
Effective influence skills to communicating findings. This individual must be an articulate and effective communicator, both verbally and in writing.
Strong interpersonal skills for interfacing with all levels of internal and external audit and management.
Ability to juggle multiple work efforts and to quickly change direction.
Required Qualifications:
Bachelor’s degree or equivalent experience; Audit, Risk or Compliance experience in large financial institution.
Minimum 3 years of IT audit experience evaluating systems that support BSA/AML, Economic Sanctions, Client Due Diligence / Know Your Customer, Investigations, and Fraud related risks and processes within a large financial institution.
Knowledge of BSA/AML, Economic Sanctions, or Fraud risk management programs, regulations (e.g., Bank Secrecy Act, OFAC, etc.), and internal policies/standards.
Displays intellectual curiosity, critical thinking, and ability to connect the dots across business and technology risks and controls.
Sound organizational, analytical, communication skills, and work paper documentation.
Proactive, takes initiative to solve problems, resourceful, and self-driven.
:
Hold one or more certifications in: Certified Information Systems Auditor (CISA), Certified Internal Auditor (CIA), Certified Anti-Money Laundering Specialist (CAMS), or Certified Fraud Examiner (CFE)
Proficiency in testing data quality controls and performing data lineage traceability using tools and techniques, such as SQL, Alteryx, Python, etc.